hub-ledgr-live-apps[.]pages[.]dev

This domain, hub-ledgr-live-apps.pages.dev, poses a high-risk brand impersonation threat targeting Ledger users. The site mimics the official Ledger Live desktop application, presenting a fraudulent interface designed to harvest sensitive credentials, recovery phrases, or cryptocurrency wallet details. Users accessing this domain may unknowingly expose their digital assets to unauthorized access or theft, as the page closely replicates the legitimate Ledger Live onboarding process, including identical visual elements and page titles such as 'Ledger® Live: Desktop — Getting started.'

Analysis indicates the domain was registered on April 21, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3, hosted on Cloudflare infrastructure in Canada. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to appear legitimate. Security vendor detections on VirusTotal show 14 out of 95 engines flagging the domain as malicious, while one security blocklist, PhishDestroy, has already listed it. The domain remains active, increasing the likelihood of continued exploitation attempts against unsuspecting users.

If this domain was visited, immediate action is required to mitigate potential compromise. Users should cease all interaction with the site and avoid entering any credentials or recovery phrases. Any cryptocurrency wallets accessed via this domain should be considered at risk; users are advised to transfer assets to a new, secure wallet and revoke any connected application permissions. Additionally, system scans using updated security tools should be performed to detect potential malware or unauthorized access. Monitor financial accounts and enable multi-factor authentication on all critical services to prevent further exploitation.