# ledgrr-liv-app.pages.dev — SUSPICIOUS

> Active Ledger impersonation site ledgrr-liv-app.pages.dev identified as a crypto drainer (0/95 VirusTotal detections).

## Summary
PhishDestroy identifies a live crypto-draining site at ledgrr-liv-app.pages.dev that mimics the official Ledger wallet login flow to steal private keys and drain user funds. The page is hosted on Cloudflare Pages (188.114.97.3) and resolved to Google Trust Services SSL, giving it an air of legitimacy while concealing its malicious purpose behind Ledger’s branding.  This domain was flagged by PhishDestroy’s automated pipeline on seed 2c6be9 within hours of creation. VirusTotal currently shows 0 out of 95 antivirus engines flagging the URL; the site went live only days ago and remains undetected by major scanners, making manual verification essential. Registrar records confirm Cloudflare, Inc. as the listed provider, a common choice for attackers who hide behind the company’s free tier.  If you visited ledgrr-liv-app.pages.dev, disconnect any connected hardware wallets immediately, revoke any clipboard or browser permissions you may have granted, and run a full antivirus scan. Do not enter recovery phrases or private keys on any page under this domain. Report the URL to PhishDestroy for rapid de-listing and follow their real-time verification tool to check any future Ledger links before interacting.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/ledgrr-liv-app.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/ledgrr-liv-app.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledgrr-liv-app.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledgrr-liv-app.pages.dev/
Last updated: 2026-04-03