lived-laedgar-en-us[.]pages[.]dev

PhishDestroy identifies lived-laedgar-en-us.pages.dev as an active crypto drainer domain masquerading as a legitimate Ledger service page. This Cloudflare-hosted site leverages the .pages.dev top-level domain to impersonate Ledger’s official infrastructure, tricking users into connecting cryptocurrency wallets under the guise of security verification. The domain resolves to IP 188.114.96.3 and is secured with a Google Trust Services SSL certificate, increasing its deceptive credibility. Analysis reveals this scam was built to exploit users seeking Ledger-related services, with the operational goal of draining connected wallets of cryptocurrency assets. This domain was flagged with 0 detections out of 95 VirusTotal scans, indicating it remains undetected by most antivirus engines. It is registered through Cloudflare, Inc., a common tactic among malicious actors to obscure origin and evade takedown. The domain is hosted on Cloudflare Pages, a legitimate platform exploited for phishing due to its fast global distribution and SSL support. These technical indicators suggest a sophisticated, rapidly deployed threat with low initial detection but high potential for financial harm. Users who have visited lived-laedgar-en-us.pages.dev should immediately disconnect any connected cryptocurrency wallets, revoke any approvals granted to unknown domains, and transfer remaining assets to a secure, offline wallet. Clear browser cookies and cache related to the domain, and run a malware scan using reputable security software. Report the domain to your wallet provider, Ledger support, and phishing reporting platforms such as Google Safe Browsing or PhishDestroy. Always verify URLs through official channels before entering sensitive information or connecting wallets.