# support-ledgr-hub.pages.dev — SUSPICIOUS

> PhishDestroy identifies a fake Ledger support phishing page at support-ledgr-hub.pages.dev with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies an active phishing campaign impersonating Ledger support, hosted at support-ledgr-hub.pages.dev. This domain mimics legitimate cryptocurrency wallet support channels, likely using a drainer script to steal credentials or funds. The threat type is classified as generic_phishing, indicating opportunistic deception rather than targeted malware delivery. Cloudflare Pages serves as the hosting platform, leveraging Google Trust Services for SSL certificates to appear legitimate. No brand-specific drainer kit signatures were detected in open-source intelligence at the time of analysis, suggesting a basic but potentially effective phishing page.  

This domain was flagged with 0/95 VirusTotal detections, indicating undetected malicious activity as of the latest scan. The registrar is Cloudflare, Inc., with the domain resolving to IP 172.66.47.26. Google Safe Browsing (GSB) has not yet flagged the domain, and no third-party blocklists list it. The domain was created recently (exact date unavailable), and its use of Google Trust Services for SSL certificates enhances its perceived legitimacy. These technical indicators suggest a newly deployed campaign with low detection coverage, increasing potential victim exposure.  

The campaign is currently active, with no takedown or blocklisting observed at this stage. PhishDestroy recommends immediate blocking of the domain and IP address, along with heightened scrutiny for Ledger-related support queries. The remaining risk is assessed as medium-high due to the use of legitimate hosting providers and SSL certificates, which can bypass traditional security measures. Users should verify support channels directly through Ledger's official website and report suspicious activity to prevent further spread.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.26

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2ff56f59-ffbf-45a4-b90a-8188c7d91347
- PhishDestroy: https://phishdestroy.io/domain/support-ledgr-hub.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/support-ledgr-hub.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/support-ledgr-hub.pages.dev/
Last updated: 2026-03-21