fqs-ledgrewalite-helps[.]pages[.]dev

The domain fqs-ledgrewalite-helps.pages.dev is a phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It presents itself as the 'Ledger Live Wallet | Official Secure Crypto Management App' to deceive users into interacting with fraudulent crypto management interfaces. This site poses an elevated risk as a cryptocurrency scam, though no drainer kit was identified. As of the latest verification, fqs-ledgrewalite-helps.pages.dev has been taken offline.

Technical analysis of fqs-ledgrewalite-helps.pages.dev reveals limited but notable detection. The domain is flagged by 2 of 95 security vendors on VirusTotal, including LevelBlue and Phishing Database. It appears on one security blocklist, PhishDestroy, but is not flagged by Google Safe Browsing. The domain was registered through Cloudflare, Inc. on September 19, 2025, and resolves to the IP address 172.66.46.221, hosted by Cloudflare in California. The SSL certificate is issued by Google Trust Services (WE1), and the site employs technologies such as HSTS, Cloudflare, and HTTP/3. The observed HTTP status is 403, indicating access restrictions or takedown.

Users who interacted with fqs-ledgrewalite-helps.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. Monitor transaction histories for unauthorized activity and enable two-factor authentication on all crypto-related accounts. Report the phishing domain to Ledger’s official security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.