ledgerlive--faq[.]pages[.]dev

PhishDestroy identifies ledgerlive--faq.pages.dev as a high-risk crypto drainer posing as the official Ledger Live FAQ page. This domain leverages brand impersonation to trick users into connecting crypto wallets or entering seed phrases. Upon visiting, users are met with a fraudulent interface mimicking Ledger's official support, designed to harvest private keys or initiate unauthorized transactions. Cloudflare infrastructure and a Google Trust Services SSL certificate are weaponized to lend false credibility to the site. This domain was flagged by PhishDestroy using intelligence from VirusTotal (2/95 security vendors) and Google Safe Browsing (SOCIAL_ENGINEERING category). The domain resolves to IP 188.114.97.3 and is registered via Cloudflare, Inc. It impersonates the legitimate Ledger Live interface under the title 'Ledger Live - Secure Crypto Management', creating a near-identical replica to deceive visitors. The presence of a Google-issued SSL certificate does not indicate legitimacy—it only confirms basic encryption, a common tactic in fraudulent crypto drainers.

If you visited ledgerlive--faq.pages.dev, immediately disconnect your device from the internet and scan for malware. Do not enter any wallet seed phrases or connect hardware wallets. Ledger users should verify all support links via the official ledger.com domain. Report this domain to PhishDestroy for blocking. Consider rotating all crypto wallet addresses and monitoring transaction history for unauthorized transfers. Always access Ledger Live only through the official website or verified app store links.