ldger-lve[.]pages[.]dev

PhishDestroy identifies ldger-lve.pages.dev as a suspicious domain actively impersonating the Ledger brand to deceive cryptocurrency users. This site likely serves as a crypto drainer, a type of malware designed to steal digital assets by tricking victims into connecting their wallets or entering private keys. The page mimics Ledger’s official branding to appear legitimate, leveraging Cloudflare’s infrastructure to host the malicious content while obscuring its true origin. This domain was flagged by PhishDestroy due to its active status in brand impersonation campaigns. VirusTotal currently shows 3/95 security engines detecting the threat, indicating it has evaded automated scanners. The domain is registered through Cloudflare, Inc., resolving to IP address 172.66.47.190, and holds an SSL certificate issued by Google Trust Services. Such domains often exploit free or anonymous hosting services to rapidly deploy and rotate malicious pages, making traditional blocklists ineffective until widespread reports emerge. If you visited ldger-lve.pages.dev, disconnect any connected wallets immediately and revoke any permissions granted to suspicious sites. Do not enter your recovery phrases, private keys, or seed phrases under any circumstances. Scan your device with reputable antivirus software and consider transferring remaining assets to a secure, offline wallet. Report the domain to Ledger’s official security channels and platforms like Google Safe Browsing to help prevent further harm.