ledgr-liive-app[.]pages[.]dev

The domain ledgr-liive-app.pages.dev impersonates the cryptocurrency hardware wallet brand Ledger. This phishing site was flagged by 1 out of 94 vendors on VirusTotal and is listed on one public blocklist, specifically PhishDestroy's. Although the site is currently offline, it was first detected on April 6, 2026, the same day it was created.

Hosted by Cloudflare, Inc. with an IP address located in Canada, this domain aimed to deceive users into believing they were interacting with the legitimate Ledger platform. The SSL certificate was issued by Google Trust Services, which might have lent an air of legitimacy to unsuspecting users. The platform risk score for this domain was assessed at 61 out of 100, indicating a significant threat level.

Despite its takedown, the domain's rapid detection and inclusion in blocklists highlight the effectiveness of early threat identification systems. The single VirusTotal detection suggests that the domain was fresh and possibly evaded broader security measures initially. This case underscores the importance of timely threat intelligence in mitigating risks posed by phishing domains.