# live-ledger-support.pages.dev — SUSPICIOUS

> Potential crypto drainer at live-ledger-support.pages.dev impersonates Ledger; 1 of 95 VirusTotal vendors flagged it.

## Summary
PhishDestroy identifies the site live-ledger-support.pages.dev as an active brand-impersonation threat designed to mimic official Ledger support pages.

This domain was flagged by PhishDestroy’s automated pipeline on seed 2cfae3; VirusTotal lists only 1 out of 95 participating security vendors detecting the page. The domain was registered through Cloudflare, Inc., which also hosts the DNS and acts as the registrar, and resolves to IP address 188.114.96.3 under a Google Trust Services SSL certificate. These technical markers point to a lightweight, fast-flux–style campaign rather than a long-standing infrastructure.

If you visited the site, disconnect any connected hardware wallets, revoke permissions on your Ledger Live app, and scan your device with an up-to-date antivirus tool. Next, rotate every Ledger seed phrase and wallet password. Finally, submit the URL to PhishDestroy for automated removal and reputation tagging to protect other users.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1c2a6799-e5a0-40d2-9d5b-78125af53b9a
- PhishDestroy: https://phishdestroy.io/domain/live-ledger-support.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/live-ledger-support.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/live-ledger-support.pages.dev/
Last updated: 2026-03-22