live-legr-com[.]pages[.]dev

The domain live-legr-com.pages.dev poses a significant threat by impersonating Ledger, a popular cryptocurrency wallet service. It was flagged as malicious by 11 out of 94 vendors on VirusTotal, indicating a high level of suspicion around its activities. The site has been taken down, but it initially aimed to deceive users into revealing sensitive information by mimicking the Ledger Live Wallet interface.

Registered through Cloudflare, Inc., and hosted on an IP address in Canada, the domain used an SSL certificate issued by Google Trust Services. This gave it an appearance of legitimacy, potentially misleading users into trusting the site. The platform risk score of 78 out of 100 underscores the domain's potential to cause harm.

PhishDestroy identified this threat on the same day it was created, April 25, 2026. This rapid detection highlights the effectiveness of PhishDestroy's pipeline in catching threats before they propagate through antivirus databases. The domain's presence on a public blocklist further emphasizes the risk it posed to unsuspecting users. Despite being offline now, the domain's initial activity serves as a reminder of the persistent threats in the cryptocurrency space.