us-ldgeres-live[.]pages[.]dev

PhishDestroy identifies us-ldgeres-live.pages.dev as a high-risk brand impersonation threat currently active and targeting Ledger users. This domain is a sophisticated phishing site designed to harvest cryptocurrency wallet credentials by mimicking the legitimate Ledger Live platform. The threat is classified as brand_impersonation with a high risk level, and it remains operational as of the latest analysis.

Registered through Cloudflare, Inc. on April 04, 2026, this domain resolves to IP address 172.66.44.103 and features an SSL certificate issued by Google Trust Services (WE1). It has been flagged by 9 out of 95 security vendors on VirusTotal, indicating significant malicious consensus, and it appears on one security blocklist. The page title, "Ledger Live Wallet — Technical Edition," is a convincing lure designed to trick users into believing they are accessing a legitimate update or technical support page. These technical indicators collectively confirm the domain's fraudulent nature and its specific targeting of Ledger users.

Given that this phishing domain is still active, users must remain vigilant. PhishDestroy strongly advises against visiting the domain or entering any personal information, including Ledger Live credentials or seed phrases. Legitimate Ledger communications never request sensitive data via unsolicited links. Users who have interacted with the site should immediately change their Ledger account passwords and enable two-factor authentication. For ongoing protection, report the domain to relevant authorities and consider using security tools that block known phishing sites.