walet-ledgrelives[.]pages[.]dev

PhishDestroy identifies walet-ledgrelives.pages.dev as a live fake Ledger Live App page designed to trick visitors into connecting a crypto wallet or entering seed phrases. The site’s page title and branding are identical to the real Ledger Live mobile wallet, attempting to harvest credentials or drain funds once wallet connections are approved. Cloudflare hosts the page on IP 188.114.97.3 with a Google Trust Services SSL certificate, giving it an immediate appearance of legitimacy. This domain was flagged and is still active; VirusTotal currently shows 0 security engines detecting the page. Registration details indicate a Cloudflare, Inc. proxy—common among short-lived phishing kits—and the kit itself appears to be a generic crypto drainer template repurposed to impersonate Ledger’s official mobile wallet. The page was created recently and is propagating through social-engineering channels. If you visited walet-ledgrelives.pages.dev, immediately disconnect any crypto-wallet browser extension, revoke any wallet-connect permissions granted to the site, and do not re-enter your Ledger seed phrase anywhere. Run a malware scan on the device you used and consider transferring remaining funds to a newly initialized wallet with a different seed. Report the domain to PhishDestroy for takedown and notify Ledger’s official support channel so they can blacklist the URL.