ledger-live-app-fg[.]pages[.]dev

The domain ledger-live-app-fg.pages.dev has been identified as a confirmed phishing site specifically designed to impersonate Ledger, a popular cryptocurrency hardware wallet provider. This brand impersonation threat is currently offline, thanks to takedown actions, but it remains a risk for users who may have encountered it previously. The site was hosted using Cloudflare's infrastructure and served an SSL certificate issued by SSL Corporation, lending it a false sense of legitimacy.

Technical indicators paint a clear picture of malicious intent. According to VirusTotal, 10 out of 95 security vendors flagged this domain as malicious, and it appears on at least one security blocklist. The domain was registered on September 11, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.47.149. The page title observed was "Suspected phishing site | Cloudflare," which suggests that Cloudflare itself may have flagged the site. Despite this, the site could still have been active long enough to deceive users.

Given the current offline status, users who may have visited this domain should take immediate precautions. PhishDestroy recommends that anyone who entered their Ledger credentials or seed phrases on this site consider their funds at risk and transfer them to a new wallet immediately. Always verify URLs carefully, enable two-factor authentication, and only use official Ledger channels for transactions or support. Staying vigilant against such brand impersonation threats is crucial in protecting digital assets.