base-ledgor-en[.]pages[.]dev

PhishDestroy identifies base-ledgor-en.pages.dev as an active brand impersonation threat impersonating Ledger’s official crypto wallet interface. This fraudulent page, titled 'Ledger® Live Wallet™ | Ledger Live Crypto Wallet App', is designed to deceive visitors into entering sensitive wallet recovery phrases or private keys by replicating Ledger’s branding and user interface. Visitors risk cryptocurrency theft through unauthorized transactions if credentials are entered, as threat actors can drain connected wallets in real time. This domain was flagged by PhishDestroy’s automated analysis pipeline on seed 120207, with confirmed attributes including a Google Trust Services SSL certificate, Cloudflare registration, and resolution to IP 172.66.47.122. VirusTotal currently shows 0 detections out of 95 scanners, indicating it remains under the radar despite clear malicious intent. The page has been active since initial detection and continues to serve malicious content without takedown intervention, posing ongoing risk to unwary cryptocurrency users. If you visited base-ledgor-en.pages.dev, do not enter any wallet recovery phrases, private keys, or personal information. Disconnect from the internet if possible and scan your device for malware using trusted antivirus software. Monitor your cryptocurrency wallets closely for unauthorized transactions. Report this domain to your antivirus provider and to PhishDestroy to aid in global threat intelligence sharing. Avoid re-accessing the site, as it continues to actively impersonate Ledger and may contain additional payloads.