ledj-er-live[.]pages[.]dev

The domain ledj-er-live.pages.dev is a phishing site involved in brand impersonation targeting the cryptocurrency hardware wallet company Ledger. It posed a scam threat by mimicking Ledger's branding to deceive users, although it did not use a known drainer kit. The site has been taken offline and is currently under investigation for its malicious activity, making ledj-er-live.pages.dev unsafe to visit or trust.

Technical analysis shows that ledj-er-live.pages.dev was registered on September 27, 2025, through the registrar Cloudflare, Inc. It resolves to the IP address 172.66.47.36 located in Canada and uses an SSL certificate issued by Google Trust Services / WE1. The domain is listed on one security blocklist, PhishDestroy, but has not been flagged by Google Safe Browsing and has zero detections out of 95 vendors on VirusTotal. The site employed technologies such as HSTS, Cloudflare, and HTTP/3, and returned an HTTP 403 status before being taken offline.

Users who may have interacted with ledj-er-live.pages.dev should be cautious of credential theft due to its brand impersonation phishing nature. It is recommended to immediately change passwords associated with Ledger accounts, enable two-factor authentication, and monitor financial accounts for unauthorized activity. Reporting the phishing attempt to security blocklist services like PhishDestroy and to the official Ledger support team can help mitigate further risk. Avoid visiting ledj-er-live.pages.dev as it is confirmed unsafe and part of an ongoing scam investigation.