ledger--live-login-cdn[.]pages[.]dev

The domain ledger--live-login-cdn.pages.dev has been identified as a brand impersonation phishing site specifically targeting Ledger users. This active threat poses a high risk to individuals attempting to access their cryptocurrency wallets. The page title, "Ledger Live Login — Complete Guide to Securely Access Ledger Live," is designed to deceive users into believing they are on a legitimate Ledger support page. In reality, this site is a crypto drainer that attempts to steal login credentials and potentially private keys.

Technical analysis reveals that the domain is hosted on Cloudflare Pages, registered on March 27, 2026, and resolves to IP address 172.66.47.21. It uses an SSL certificate from Google Trust Services (WE1), which may give it a false sense of security. The domain appears on one security blocklist and has a low trust score, with 11 out of 95 VirusTotal security vendors flagging it as malicious. These indicators confirm the site's fraudulent nature and the sophistication of the attack.

As of now, the domain remains active and continues to pose a threat to unsuspecting users. PhishDestroy strongly advises against visiting this site or entering any personal information. Users should always verify the authenticity of Ledger-related URLs by checking official sources and using bookmark links. If you have already interacted with this domain, change your Ledger Live credentials immediately and enable two-factor authentication. Report any suspicious activity to the appropriate authorities.