ldger-live-apps[.]pages[.]dev

PhishDestroy identifies ldger-live-apps.pages.dev as an active crypto drainer domain impersonating the Ledger hardware wallet brand. This fraudulent site exploits Ledger’s reputation to trick cryptocurrency users into connecting wallets or entering seed phrases, enabling direct theft of digital assets. The domain leverages a Pages.dev subdomain to mimic official Ledger services, increasing credibility among unsuspecting visitors. Analysis reveals this threat is elevated due to its active status and partial detection by security vendors. This domain was flagged by PhishDestroy after resolving to IP 188.114.97.3 with a Google Trust Services SSL certificate. Security vendor VirusTotal detected this threat with a score of 1 out of 95, indicating low initial detection but confirming malicious intent. The domain is registered through Cloudflare, Inc., a common tactic to obscure true ownership and evade takedown efforts. Despite its recent deployment, this site has already been identified by a single security vendor, highlighting the need for proactive user vigilance. Users who visited ldger-live-apps.pages.dev should immediately disconnect any connected wallets and revoke permissions through their wallet’s interface or Ledger Live settings. Never enter seed phrases or private keys into any website claiming to be Ledger support. Report this domain to Ledger’s official security channels and your local cybercrime unit. Update your browser and wallet software to the latest versions to benefit from enhanced security features. Always verify URLs through official Ledger communication channels before interacting with any service.