leedger-cloud-liive[.]pages[.]dev

The domain leedger-cloud-liive.pages.dev has been identified as a brand impersonation threat specifically targeting Ledger users through a crypto drainer scheme. This fraudulent domain is currently offline, but its recent activity posed a significant risk to cryptocurrency holders. The site mimicked the legitimate Ledger support page with the title "How to Set Up Your Ledger Hardware Wallet | Ledger" to deceive visitors into connecting their hardware wallets and potentially draining their funds.

Technical analysis reveals concerning indicators. The domain was registered on April 13, 2026, through Cloudflare, Inc., and resolved to IP address 188.114.96.3. It was flagged by 8 out of 95 security vendors on VirusTotal, indicating moderate detection across the security community. Additionally, it appeared on 1 security blocklist and utilized an SSL certificate from Google Trust Services (WE1). The domain's recent creation date and use of Cloudflare's infrastructure are common tactics among phishing operations to evade detection.

As of the latest assessment, leedger-cloud-liive.pages.dev has been taken offline, which reduces immediate risk. However, users should remain vigilant as similar domains may emerge. PhishDestroy recommends that Ledger users always verify the authenticity of any website by checking official support channels and never entering seed phrases or connecting hardware wallets on untrusted sites. If you have interacted with this domain, immediately transfer your assets to a new wallet and run a security scan on your device. For ongoing protection, use PhishDestroy's real-time verification tool before accessing any crypto-related website.