ladger-laive[.]pages[.]dev

PhishDestroy identifies ladger-laive.pages.dev as an active Ledger brand impersonation scam site designed to deceive users into surrendering sensitive cryptocurrency wallet credentials. The page leverages Ledger’s recognizable branding to appear legitimate, typically hosting a spoofed login portal that captures entered recovery phrases or private keys. Once harvested, these credentials allow attackers to drain victim wallets directly. Security researchers note this tactic is especially effective against users who recently interacted with Ledger support or purchased hardware wallets, as the campaign often surfaces in search results for terms like “Ledger wallet recovery” or “Ledger Nano X setup.” This domain was flagged by 1 out of 95 VirusTotal security vendors and is hosted on Cloudflare’s infrastructure at IP address 188.114.96.3. The phishing site operates under a Google Trust Services SSL certificate, which may lend false credibility by displaying a padlock icon in browsers. The domain was registered through Cloudflare, Inc., a common choice among threat actors due to its privacy protections and fast deployment capabilities. While the site appears to be actively resolving, the low detection rate highlights the importance of manual verification before entering any sensitive information. If you visited ladger-laive.pages.dev, immediately disconnect from the internet and check your Ledger device or software for unauthorized transactions. Do not re-enter your recovery phrase or private keys anywhere on this domain. Scan your connected devices with updated antivirus software and consider revoking any permissions granted to unknown browser extensions. Report the domain to Ledger’s official phishing reporting channel and your local cybercrime unit. Always access Ledger services only through verified links from ledger.com or official app stores to avoid similar scams.