# liveledgr-walet.pages.dev — SUSPICIOUS

> PhishDestroy identifies liveledgr-walet.pages.dev as a phishing site mimicking Ledger wallets. 2 out of 95 security vendors have flagged it.

## Summary
PhishDestroy has identified liveledgr-walet.pages.dev as an active phishing domain posing as a Ledger wallet service to steal cryptocurrency credentials and funds. The site is hosted on Cloudflare Pages and resolves to IP 188.114.97.3, leveraging Google Trust Services for SSL certificates to appear legitimate. Threat actors are likely distributing this domain via targeted phishing emails or deceptive advertisements, aiming to harvest private keys, recovery phrases, or login details from unsuspecting users.  This domain was flagged by 2 out of 95 VirusTotal security vendors, indicating limited but present detection. It was registered through Cloudflare, Inc., and is hosted on Google’s infrastructure, making takedown efforts more complex. While the exact creation date of the domain is not disclosed in the available intelligence, its active status and low detection rate suggest it may have been operational for a short period to evade broader scrutiny. The domain’s structure—mimicking the legitimate Ledger wallet domain (ledger.com)—is a deliberate attempt to deceive users into believing they are accessing an official service.  If you or your organization has visited liveledgr-walet.pages.dev, assume compromise and take immediate action. Disconnect the device from the internet to prevent further unauthorized access, and scan for malware or keyloggers using reputable security software. Revoke any credentials entered on the site, including wallet recovery phrases or passwords, and transfer remaining funds to a newly generated, secure wallet. Report the incident to your IT security team or relevant cryptocurrency fraud authorities, and consider notifying Ledger support to assist in domain takedown efforts. Proactive monitoring for unusual transactions or unauthorized access is strongly advised.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/7e9372b3-60ef-4634-b6ee-8323d4d5ba80
- PhishDestroy: https://phishdestroy.io/domain/liveledgr-walet.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/liveledgr-walet.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/liveledgr-walet.pages.dev/
Last updated: 2026-03-26