# support-ledgrcom-helps--us.pages.dev — MALICIOUS > support-ledgrcom-helps--us.pages.dev is a confirmed crypto drainer scam flagged by 13/95 VirusTotal vendors. Avoid this credential theft page immediately. ## Summary PhishDestroy identifies support-ledgrcom-helps--us.pages.dev as an active crypto drainer scam site designed to steal cryptocurrency assets from unsuspecting victims. This domain impersonates legitimate support channels to trick users into connecting wallets or entering private keys, enabling direct fund extraction. The threat is elevated due to the irreversible nature of crypto transactions, making this a high-stakes credential theft operation. This domain was flagged by 13 out of 95 VirusTotal security vendors, indicating significant malicious activity. It resolves to IP 172.66.44.138 and is registered through Cloudflare, Inc., leveraging Google Trust Services for SSL encryption. The use of Cloudflare’s Pages.dev subdomain infrastructure suggests an attempt to appear legitimate while hosting malicious content. With no blocklist data provided, the domain remains active and accessible, posing an ongoing risk to cryptocurrency users. To mitigate exposure, users should immediately block support-ledgrcom-helps--us.pages.dev via DNS filtering or browser-based blocklists. Avoid interacting with any links or pop-ups from this domain, especially those requesting wallet connections or personal credentials. Report the domain to your antivirus provider and local cybercrime units to aid in takedown efforts. Always verify support channels directly through official websites before engaging. ## Threat Details - Verdict: MALICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.44.138 ## Detection Status - VirusTotal: 13 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/19c665ac-bf58-4569-a9fa-c56a999e0d2f - PhishDestroy: https://phishdestroy.io/domain/support-ledgrcom-helps--us.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/support-ledgrcom-helps--us.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/support-ledgrcom-helps--us.pages.dev/ Last updated: 2026-03-22