get-updated-ldgerlive-web[.]pages[.]dev

The domain get-updated-ldgerlive-web.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It presented itself as the legitimate Ledger Live Desktop platform to deceive users into entering sensitive information, posing an elevated risk as a cryptocurrency scam. No drainer kit was identified, and the site is currently taken offline.

Technical analysis reveals that get-updated-ldgerlive-web.pages.dev was flagged by 13 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and BitDefender. It appeared on one security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through Cloudflare, Inc. on March 23, 2026, and resolved to the IP address 188.114.97.3, hosted by Cloudflare in Canada. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Ledger Live Desktop | Secure and Full-Featured Crypto Management'. The site employed HSTS, Cloudflare, and HTTP/3 technologies, and returned an HTTP 403 status when accessed.

Users who interacted with get-updated-ldgerlive-web.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to mitigate potential losses. Change passwords for any accounts accessed via the phishing site and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized transactions and report the domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand's security team for further action.