ledge-live-login-learn[.]pages[.]dev

This domain, ledge-live-login-learn.pages.dev, has been flagged with an elevated risk level for brand impersonation, specifically targeting Ledger cryptocurrency wallet users. The site poses as a legitimate Ledger Live login page, aiming to trick visitors into revealing their sensitive credentials. It has already been taken offline, but users should remain vigilant as similar threats may reappear.

PhishDestroy identified this threat through multiple indicators: VirusTotal shows 17 out of 95 security vendors flagging the domain as malicious. The domain was registered on March 23, 2026, via Cloudflare, Inc., and resolves to IP address 172.66.47.149. It appears on one security blocklist and uses an SSL certificate from Google Trust Services (WE1). The page title, "Ledger® Live Login | Safe Access to Your Digital Assets," is a direct copy of the legitimate service to deceive users.

To protect against such brand impersonation threats, users should always verify URLs before entering credentials, especially for financial or crypto services. Bookmark the official Ledger Live URL and never use links from unsolicited emails or messages. Enable two-factor authentication on all accounts and consider using a password manager to detect lookalike domains. If you have already entered information on this site, change your Ledger credentials immediately and contact Ledger support.