# sa-ledger-live.pages.dev — SUSPICIOUS

> Domain sa-ledger-live.pages.dev impersonates Ledger. Flagged by 2 of 95 VirusTotal vendors, pushing users to fake wallet sites. Do not enter credentials.

## Summary
PhishDestroy identifies domain sa-ledger-live.pages.dev as an active brand impersonation threat targeting the cryptocurrency wallet brand Ledger.

This domain is flagged by 2 of 95 VirusTotal security vendors and resolves to IP 188.114.96.3. It was registered through Cloudflare, Inc. and holds a Google Trust Services SSL certificate, attempting to lend false legitimacy to fraudulent activities.

Current status remains active, with elevated risk for users who may mistakenly access this page believing it to be an official Ledger service. It is crucial to avoid interacting with any links or downloads from this domain. Consumers should verify URLs directly through official Ledger channels and report any suspicious activity immediately to Ledger’s fraud prevention team. Blocking this IP at the network level is recommended to prevent accidental exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9447289d-a462-4ffc-91fd-0c1f47281320
- PhishDestroy: https://phishdestroy.io/domain/sa-ledger-live.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/sa-ledger-live.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sa-ledger-live.pages.dev/
Last updated: 2026-03-21