ledgr-liv-com[.]pages[.]dev

PhishDestroy identifies ledgr-liv-com.pages.dev as an active crypto drainer impersonating Ledger Live, targeting users through fraudulent 'live' pages. The domain leverages Cloudflare Pages hosting and Google Trust Services SSL certificates to appear legitimate, while resolving to IP 172.66.47.142. With 0 detections on VirusTotal (2/95), this threat remains undetected by most scanners, posing imminent risk to cryptocurrency users. This domain was flagged through Cloudflare Pages hosting, Google Trust Services SSL certification (validated 172.66.47.142), and 0 detections on VirusTotal. Registration via Cloudflare, Inc. suggests evasion tactics common in fraudulent sites, while the absence of blocklist flags and trust score transparency further conceals malicious intent. The domain’s structure mirrors Ledger’s branding, likely deployed to deceive users during transaction signing or seed phrase entry. Mitigation requires immediate user verification on PhishDestroy or similar platforms before interacting with wallet-related pages. Avoid entering seed phrases, private keys, or transaction details on unknown domains, especially those hosted on .pages.dev. Users should cross-check URLs against official Ledger sources and enable hardware wallet protections like transaction approval screens to block unauthorized transfers.