# public-ledgor-live.pages.dev — SUSPICIOUS

> PhishDestroy identifies public-ledgor-live.pages.dev as a crypto drainer impersonating Ledger. Only 0 of 95 VirusTotal vendors have flagged this domain.

## Summary
PhishDestroy's Threat Intelligence Unit has flagged public-ledgor-live.pages.dev as an active crypto drainer impersonating the Ledger brand. The domain is currently under investigation and remains live as of this advisory. Threat actors frequently leverage impersonation tactics to deceive users into connecting compromised wallets, making immediate identification and mitigation critical.    This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating a low detection rate despite its malicious intent. The domain is registered through Cloudflare, Inc., resolves to IP 188.114.97.3, and utilizes a Google Trust Services SSL certificate. Additional telemetry suggests the domain has not yet been widely added to public blocklists, further increasing its potential for successful exploitation. The absence of detections highlights the need for proactive monitoring and adaptive defenses.    Given the active status and low detection coverage, immediate action is required to mitigate risk exposure. Security teams should block the domain at the network perimeter and DNS level, while endpoint solutions should flag any attempts to access public-ledgor-live.pages.dev. Users should be warned against interacting with links or content associated with this domain, particularly those related to Ledger wallet services. Enhanced monitoring for related infrastructure is advised, as threat actors often pivot to new domains once current ones are exposed. PhishDestroy will continue tracking this domain and provide updates as new intelligence emerges.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4104e47b-cbf0-478f-b519-a9f4a47863e4
- PhishDestroy: https://phishdestroy.io/domain/public-ledgor-live.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/public-ledgor-live.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/public-ledgor-live.pages.dev/
Last updated: 2026-03-22