# support-ledgrcom--helps--us.pages.dev — SUSPICIOUS

> support-ledgrcom--helps--us.pages.dev poses as Ledger crypto wallet support, flagged by 0 VirusTotal vendors but resolves to a Cloudflare IP.

## Summary
PhishDestroy identifies support-ledgrcom--helps--us.pages.dev as a live Ledger Support phishing domain actively distributing generic phishing payloads. This site impersonates official Ledger crypto wallet customer support channels, attempting to deceive users into divulging wallet recovery phrases, private keys, or other sensitive data. The domain is currently categorized with a risk level of under_investigation and remains unblocked by major security vendors, making it a credible short-term threat to cryptocurrency users seeking legitimate support assistance.  

This domain was flagged by 0 of 95 VirusTotal security vendors, exhibits a clean detection profile, and operates from Cloudflare-hosted infrastructure at IP 172.66.47.84 under a Google Trust Services SSL certificate. It was registered through Cloudflare, Inc., a common choice among malicious actors seeking anonymity and rapid domain cycling. The site’s lack of detections and use of a reputable CDN highlight the challenge of early detection in current threat landscapes.  

Current status indicates the domain is still active and accessible, with no widespread blocklist inclusion as of latest analysis. Users are strongly advised not to interact with this site or follow any instructions requesting sensitive wallet information. If support assistance is needed, always verify the authenticity of the website by cross-referencing URLs with official Ledger channels and using only verified support portals.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.84

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/47f1d9f4-db6d-4379-a484-ce0fbe90cff2
- PhishDestroy: https://phishdestroy.io/domain/support-ledgrcom--helps--us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/support-ledgrcom--helps--us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/support-ledgrcom--helps--us.pages.dev/
Last updated: 2026-03-22