ledgerlivers[.]pages[.]dev

ledgerlivers.pages.dev is currently active and impersonates the cryptocurrency wallet brand Ledger. It has been flagged by 3 out of 91 vendors on VirusTotal, indicating its malicious intent. The domain is also listed on one public blocklist, specifically PhishDestroy's, which highlights its potential threat to users.

The domain's page title, 'Ledger Live Wallet — Manage Crypto Securely,' aims to deceive users into believing they are accessing the legitimate Ledger Live service. This is a common tactic used in phishing scams to harvest sensitive information such as login credentials or recovery phrases. The domain is registered through Cloudflare, Inc., and hosted on an IP address in Canada, also managed by Cloudflare.

The SSL certificate is issued by Google Trust Services, which might lend an appearance of legitimacy to unsuspecting users. However, the platform risk score of 76 out of 100 indicates a significant threat level. The site targets cryptocurrency users, exploiting their trust in the Ledger brand to potentially compromise their digital assets.

PhishDestroy detected this domain on the same day it was created, demonstrating the effectiveness of its early detection capabilities. By identifying such threats during the critical window before antivirus databases are updated, PhishDestroy provides crucial protection against emerging phishing scams. This proactive approach helps mitigate risks associated with newly registered domains that attempt to exploit the gap in security measures.