current-ledger-live[.]pages[.]dev

PhishDestroy identifies current-ledger-live.pages.dev as an active Ledger brand-impersonation domain designed to deceive cryptocurrency users. The site masquerades as the legitimate Ledger Live platform, aiming to steal seed phrases or drain wallets. Cloudflare hosts the page on IP 188.114.96.3 and it carries a Google Trust Services SSL certificate, giving it a false appearance of authenticity. With zero detections out of 95 VirusTotal scans, the threat remains under the radar for now, making it especially dangerous to unsuspecting visitors. This domain was flagged on d7af5f seed data and registered through Cloudflare, Inc., routing traffic to 188.114.96.3. VirusTotal currently shows 5/95 engines detecting malicious content, highlighting how early-stage threats often slip through automated defenses. The site specifically impersonates Ledger, a well-known hardware wallet brand, to trick users into entering recovery phrases or connecting compromised browser extensions. If you visited current-ledger-live.pages.dev, disconnect your device from the internet immediately to prevent unauthorized wallet access. Do not enter any seed phrases, passwords, or private keys on the site. Use a reputable antivirus or browser security extension to scan for malware. Report the domain to Cloudflare via their abuse portal and warn Ledger’s official support channels. Finally, check your wallet apps for suspicious transactions and consider transferring remaining funds to a new, isolated wallet address.