# ledzer-live-app.pages.dev — SUSPICIOUS

> PhishDestroy flags ledzer-live-app.pages.dev as a live crypto drainer kit hosting site. Resolves to 188.114.97.3 with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies ledzer-live-app.pages.dev as an active crypto drainer kit hosted under Cloudflare Pages and resolving to IP address 188.114.97.3. This domain impersonates a legitimate application interface to trick users into connecting cryptocurrency wallets, after which deposited assets are silently drained by the malicious smart contract embedded within the phishing page. The landing page mimics a Web3 application dashboard, complete with fake transaction previews and balance displays, all designed to appear authentic while facilitating unauthorized fund transfers.

This domain was flagged under seed 879e35 and shows zero detections across 95 VirusTotal engines as of the latest scan. The registrant leverages Cloudflare, Inc. as the registrar via Cloudflare Pages, which provides SSL encryption through Google Trust Services. The domain’s infrastructure is hosted on Cloudflare’s edge network, masking its true origin while enabling rapid propagation across global users. No third-party blocklist entries have been recorded yet, raising the risk of widespread exposure before detection systems catch up.

Current status remains active with no takedown actions observed. PhishDestroy continues monitoring and has escalated this threat for immediate review. Despite low VT detection, the combination of active hosting, legitimate-looking branding, and wallet-draining functionality poses a high risk to cryptocurrency users. Users are strongly advised to verify any suspicious link using PhishDestroy and avoid interacting with unknown wallet connection prompts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3349bf2f-ae13-4864-b43a-560ce2df02ca
- PhishDestroy: https://phishdestroy.io/domain/ledzer-live-app.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledzer-live-app.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledzer-live-app.pages.dev/
Last updated: 2026-03-22