faq--ledger-live-us[.]pages[.]dev

PhishDestroy identifies the domain faq--ledger-live-us.pages.dev as an active brand impersonation page that mimics the official Ledger Live interface. The site is engineered to trick visitors into connecting a cryptocurrency wallet so any funds can be automatically drained the moment a transaction is authorized. The page is engineered to harvest seed phrases, private keys, or signed messages that later allow attackers to empty supported wallets without additional prompts. PhishDestroy notes this domain was flagged on 2024-05-09, registered through Cloudflare, Inc. within the last 48 hours, and currently resolves to IP 172.66.44.253 using a Google Trust Services SSL certificate. VirusTotal reports 0 detections out of 95 engines at the time of analysis, indicating the page remains under the radar of most antivirus and browser defense layers. If you visited this site, stop all wallet connections immediately and disconnect the device from the internet. Do not enter any seed phrases, passwords, or private keys. Inspect your wallet’s transaction history for any unrecognized outgoing transfers; if found, revoke all session approvals through your wallet’s settings or app. Report the incident to Ledger support and to PhishDestroy for takedown requests using the unique seed b9766e.