ldeger-livae[.]pages[.]dev

PhishDestroy identifies an active brand-impersonation site hosted at ldeger-livae.pages.dev that is currently under investigation for mimicking the Ledger hardware-wallet brand. The page is designed to trick visitors into connecting cryptocurrency wallets or entering seed phrases, making it a crypto-drainer threat rather than generic phishing. Google Trust Services issued the SSL certificate, and the domain resolves to IP 172.66.47.83 through Cloudflare, Inc. This domain was flagged by PhishDestroy after VirusTotal returned 4 out of 95 detection engines recognizing the threat as of the latest scan. The page is registered through Cloudflare, Inc., a common hosting choice for short-lived impersonation campaigns. The seed identifier d6e516 tags this investigation for tracking across security teams. If you visited ldeger-livae.pages.dev, immediately disconnect any connected wallets and revoke any permissions granted to unknown sites. Do not enter seed phrases, private keys, or wallet passwords on the page. Clear browser cache and cookies, then run a reputable malware scan on your device. Report the domain to Ledger’s official abuse channels and share this alert with your crypto community to prevent further victimization.