lives-ledgr-en[.]pages[.]dev

The domain lives-ledgr-en.pages.dev has been identified as a confirmed phishing site engaged in brand impersonation, specifically targeting users of the cryptocurrency hardware wallet provider Ledger. This threat was uncovered by PhishDestroy during routine monitoring and is classified as elevated risk due to its direct attempt to steal login credentials and potentially seed phrases from unsuspecting victims. The site masqueraded as the legitimate Ledger Live platform with the title 'Ledger Live | Secure Crypto Wallet', aiming to deceive users into surrendering sensitive financial information.

Technical indicators paint a clear picture of malicious intent. VirusTotal scanning shows that 1 out of 95 security vendors flagged this domain, confirming its presence on at least one security blocklist. The domain was created on September 26, 2025, and registered through Cloudflare, Inc. It resolved to IP address 172.66.45.33 and utilized an SSL certificate issued by Google Trust Services (WE1), giving it a false veneer of legitimacy. Notably, the domain is not listed on Google Safe Browsing, but its presence on a blocklist and the VT flag provide strong evidence of its phishing nature.

As of the latest check, the domain has been taken offline, neutralizing the immediate threat. However, users who may have interacted with the site before takedown should take proactive measures: change any passwords entered on the site, enable two-factor authentication on all cryptocurrency accounts, and monitor for unauthorized transactions. The unique seed bd9f9c has been logged for tracking. PhishDestroy advises remaining vigilant against similar domains and always verifying URLs directly through official Ledger communication channels.