# support-live-ldeger.pages.dev — MALICIOUS

> support-live-ldeger.pages.dev is a live phishing site mimicking Ledger Live wallets, flagged by 10/95 VirusTotal security vendors. Check the full report.

## Summary
PhishDestroy identifies an active phishing site at support-live-ldeger.pages.dev that impersonates the Ledger Live wallet interface to steal cryptocurrency credentials. This domain was flagged by 10 of 95 VirusTotal security vendors, indicating a significant but not universal detection rate. The site resolves to IP 172.66.44.139 and is hosted on Cloudflare Pages, leveraging Google Trust Services for an SSL certificate to appear legitimate.

This domain was registered through Cloudflare, Inc., and flagged by 10 of 95 VirusTotal security vendors within hours of its activation. The use of a Google Trust Services SSL certificate further enhances its credibility, tricking users into believing it is an official Ledger support portal. The combination of a credible front and rapid deployment suggests this campaign is targeting users actively seeking Ledger Live support or updates.

If you visited support-live-ldeger.pages.dev, immediately disconnect from the internet, run a full antivirus scan, and revoke any credentials entered. Do not trust unsolicited links claiming to be Ledger support. Report the domain to Ledger’s official channels and monitor financial accounts for unauthorized transactions. Always verify support links by visiting Ledger’s official website directly.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.139

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a0b9ef6c-2116-458f-a32d-016546f058d9
- PhishDestroy: https://phishdestroy.io/domain/support-live-ldeger.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/support-live-ldeger.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/support-live-ldeger.pages.dev/
Last updated: 2026-03-24