# support-ledge-live.pages.dev — SUSPICIOUS

> PhishDestroy warns support-ledge-live.pages.dev is an active crypto drainer impersonating a support portal; flagged by 1/95 VirusTotal vendors.

## Summary
PhishDestroy identifies support-ledge-live.pages.dev as an active crypto-draining phishing site masquerading as a live support portal. This domain hosts a generic phishing page designed to trick users into connecting their cryptocurrency wallets under the guise of receiving technical assistance. Once connected, the page executes unauthorized wallet drainer scripts, silently transferring funds to attacker-controlled addresses. The infrastructure leverages Cloudflare Pages for rapid deployment and Google Trust Services for SSL certificates to enhance credibility and bypass basic security checks.  

This domain was flagged by only 1 out of 95 VirusTotal security vendors at the time of analysis, indicating low detection but high potential for harm. It resolves to IP address 172.66.44.254, hosted by Cloudflare’s Pages platform, with an SSL certificate issued by Google Trust Services—common tactics to appear legitimate. While the domain’s registration details are obscured via Cloudflare, the use of a pages.dev subdomain suggests a hastily constructed campaign likely automated through GitHub or Cloudflare integrations.  

If you visited support-ledge-live.pages.dev or entered any wallet credentials, immediately disconnect your wallet, revoke any connected permissions via your wallet’s dApp browser or settings, and transfer remaining assets to a clean wallet. Do not interact further with this domain. Use PhishDestroy’s real-time verification tools to confirm the legitimacy of unsolicited support links before clicking or connecting your wallet.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.254

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a648e050-ee55-4100-8a2c-6dd4a59df844
- PhishDestroy: https://phishdestroy.io/domain/support-ledge-live.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/support-ledge-live.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/support-ledge-live.pages.dev/
Last updated: 2026-03-31