web-ladgerlive[.]pages[.]dev

web-ladgerlive.pages.dev is a phishing domain that impersonates Ledger, a popular cryptocurrency wallet service. The domain, registered with Cloudflare, Inc., was first detected on April 30, 2026, and has already been flagged as malicious by 11 out of 91 vendors on VirusTotal. Despite its takedown, it remains listed on one public blocklist, specifically by PhishDestroy.

The domain's page title, "Ledger Live – Protect Crypto Portfolio & Wallet App," suggests a direct attempt to deceive users into believing they are accessing the legitimate Ledger platform. By mimicking Ledger's branding, the site likely aimed to harvest sensitive information such as login credentials or seed phrases from unsuspecting users. The domain's SSL certificate was issued by Google Trust Services, adding a layer of superficial legitimacy.

Hosted on an IP address in Canada under CloudFlare, Inc., the domain's rapid detection and subsequent takedown highlight the effectiveness of early threat identification. PhishDestroy's platform risk score of 78/100 indicates a significant threat level, emphasizing the importance of swift action. The domain's quick appearance and disappearance underscore the transient nature of phishing sites, which often exploit short windows of opportunity before being shut down.