ledger-login-live[.]pages[.]dev

PhishDestroy has identified ledger-login-live.pages.dev as a high-risk threat actively engaged in brand impersonation. The site is specifically designed to mimic the Ledger Live Wallet interface, tricking users into entering their cryptocurrency wallet credentials. This is not a generic phishing attempt but a targeted crypto drainer that could lead to the complete loss of digital assets. The domain poses an immediate danger to anyone seeking to manage their NFTs or crypto securely.

The technical indicators paint a clear picture of malicious intent. The domain was registered on September 11, 2025, through Cloudflare, Inc., a common service used by phishing operators to obscure their hosting. It resolves to IP 188.114.97.3 and uses an SSL certificate from Google Trust Services, which may falsely convey legitimacy. VirusTotal analysis shows that 5 out of 95 security vendors flag this domain, and it appears on 1 security blocklist. While the page title reads 'Ledger Live Wallet – Secure Crypto & NFT Management,' the site is anything but secure. These data points collectively confirm that this is a well-configured but fraudulent site.

Users who encounter ledger-login-live.pages.dev should immediately close the page and never enter any personal or financial information. If you have already interacted with the site, change your Ledger Live password and enable two-factor authentication on all associated accounts. Consider moving any crypto assets to a new wallet generated offline. Report the domain to Cloudflare and Google Safe Browsing to help takedown efforts. Always verify official URLs directly from Ledger’s official website or app, and use PhishDestroy’s browser extension for real-time protection against such threats.