liveledger-wallet-cdn[.]pages[.]dev

This domain, liveledger-wallet-cdn.pages.dev, is confirmed as a fake Ledger wallet impersonation site designed to harvest login credentials and drain cryptocurrency wallets. The threat is classified as a crypto drainer disguised as a legitimate service, exploiting brand trust to trick users into surrendering sensitive data. PhishDestroy identified this as an active phishing campaign under investigation, with high-risk potential for financial loss.

PhishDestroy's analysis reveals key technical indicators supporting this assessment. The domain shows 0 detections out of 95 VirusTotal scans, suggesting it avoids conventional signature-based detection. It was registered through Cloudflare, Inc. with an SSL certificate issued by Google Trust Services, resolving to IP address 188.114.97.3. The Cloudflare Pages subdomain structure and Google-issued certificate are commonly abused to lend false legitimacy to phishing pages. The domain’s recent creation combined with the Ledger brand impersonation pattern signals a deliberate attempt to evade detection while targeting crypto users.

Users should immediately avoid interacting with this domain due to the high risk of credential theft and wallet drainage. To verify legitimacy, always access Ledger services directly through official channels like ledger.com or the Ledger Live application. If you have entered credentials or wallet information on this site, revoke access via your Ledger device immediately and transfer remaining assets to a secure wallet. Report this domain to PhishDestroy for further investigation and community protection.