live-ledgr-web[.]pages[.]dev

PhishDestroy identifies live-ledgr-web.pages.dev as an active phishing site impersonating Ledger’s official login portal to steal cryptocurrency wallet credentials. This domain is hosted on Cloudflare’s pages.dev service at IP 188.114.96.3 and leverages a Google Trust Services SSL certificate to appear legitimate. The site is engineered to deceive visitors into submitting their 24-word seed phrases or private keys under the guise of account verification or recovery. This domain was flagged through automated detection pipelines and manual analysis, revealing no detections on VirusTotal as of initial inspection. Research indicates the domain was configured through Cloudflare’s registrar, a common tactic among phishing actors to obfuscate hosting origins and evade takedowns. The SSL certificate issued by Google Trust Services further enhances its deceptive appearance, exploiting user trust in HTTPS indicators. Technical analysis shows the page mimics Ledger Live’s web interface with near-identical styling and domain structure, a hallmark of advanced phishing campaigns targeting crypto holders. If you visited this site, cease using any credentials or seed phrases entered immediately and transfer funds from affected wallets to a new, secure wallet. Scan your device for malware using tools like Malwarebytes or Windows Defender, as phishing pages often deploy keyloggers or clipboard hijackers. Report the domain to PhishDestroy and your wallet provider, and disable any browser extensions that may have intercepted your sensitive data. Always verify URLs by typing them manually or using official Ledger channels before entering sensitive information.