leidgerlive[.]pages[.]dev

PhishDestroy identifies leidgerlive.pages.dev as a Ledger brand impersonation domain registered through Cloudflare and hosted on IP 188.114.96.3. Cloudflare’s Pages.dev platform was leveraged to deploy a fraudulent Ledger Live interface designed to harvest wallet credentials and seed phrases from unsuspecting users. Detection engines currently show 0 detections out of 95 scans on VirusTotal, indicating low detection coverage despite clear impersonation intent.

Technical indicators confirm this domain resolves to 188.114.96.3, uses a Google Trust Services SSL certificate, and is registered with Cloudflare, Inc. The page title ‘leidgerlive.pages.dev’ matches the hosting platform structure commonly used for quick deployments of fake services. With 0 VirusTotal detections, no active blocklist entries, and no known drainer kit signatures, this domain currently operates with minimal interference.

This domain remains active and under investigation as of the latest scan. Users are advised to avoid visiting leidgerlive.pages.dev and to verify all crypto wallet sites directly via official Ledger domains. Remaining risk is moderate due to low detection coverage and active accessibility. Immediate action includes updating browser blocklists and user awareness campaigns targeting Ledger users to prevent credential theft and fund loss.