access-livledgr-home[.]pages[.]dev

PhishDestroy has identified a malicious domain, access-livledgr-home.pages.dev, engaged in brand impersonation targeting Ledger users. This domain mimics the official Ledger Live platform to trick visitors into revealing sensitive information. No drainer kit was explicitly identified, but the page title "Ledger™ Live: Download | Getting Started" suggests a credential theft or crypto-drainer attack vector.

Technical indicators reveal that the domain was created on April 12, 2026, and registered through Cloudflare, Inc. It resolves to IP address 172.66.47.9 and uses an SSL certificate issued by Google Trust Services (WE1). VirusTotal reports that 12 out of 95 security vendors flag this domain as malicious. The domain appears on at least one security blocklist, though Google Safe Browsing status is not specified.

The domain is currently offline, indicating that it has been taken down by the hosting provider or registrar following security reports. However, users should remain vigilant as similar domains may reappear. PhishDestroy recommends avoiding any interaction with this domain, never entering Ledger Live credentials or seed phrases on untrusted sites, and reporting any suspicious pages to Ledger's security team. Always verify URLs before connecting your hardware wallet.