lledgers--lives[.]pages[.]dev

PhishDestroy identifies the active domain lledgers--lives.pages.dev as a confirmed brand impersonation crypto drainer targeting Ledger users. This fraudulent page masquerades as a legitimate Ledger service to trick victims into connecting cryptocurrency wallets, resulting in asset theft. The infrastructure leverages deceptive naming conventions (double hyphens, ‘lives’ subdomain) to appear authentic at first glance, exploiting user trust in the Ledger brand to facilitate cryptocurrency theft.

This domain was flagged with a VirusTotal detection ratio of just 1 out of 95 security vendors, indicating low visibility in automated scanning despite its malicious intent. It is registered through Cloudflare, Inc. and resolves to IP address 188.114.97.3. The site holds a valid SSL certificate issued by Google Trust Services, enhancing its deceptive legitimacy. While the exact creation date is not publicly disclosed in the provided data, the domain remains active and unblocked by major Safe Browsing services as of the latest assessment.

As of this evaluation, lledgers--lives.pages.dev remains active and poses an elevated risk to cryptocurrency users, particularly those familiar with Ledger hardware wallets. Immediate action should be taken to block access to this domain at the network and endpoint levels. Users are advised to avoid any unsolicited links referencing this domain or claiming to offer Ledger services. Ledger has not authorized this site, and all interactions should be restricted. Remaining risk is high due to the domain’s active status, SSL certificate, and low detection rate, necessitating proactive blocking and user education to prevent financial loss.