home-ledger-app[.]webflow[.]io

PhishDestroy identifies home-ledger-app.webflow.io as a high-risk Ledger brand impersonation site actively harvesting user credentials under the guise of the Ledger Live application. This malicious domain parades as the official Ledger Live App with the page title 'Ledger Live App - Protect Your Crypto Assets,' deceiving visitors into submitting sensitive data. Security research confirms this domain resolves to IP 104.18.36.248 and operates with a valid SSL certificate issued by Google Trust Services, adding a veneer of legitimacy while executing its theft operation. This domain was flagged by 20 out of 95 VirusTotal security vendors and maintains active status despite its malicious intent. Records indicate the domain leverages Webflow’s hosting infrastructure, a platform frequently exploited by threat actors to create convincing impersonation pages. The seed content closely mirrors Ledger’s official marketing language, specifically targeting cryptocurrency owners who may mistake this counterfeit interface for the genuine application. Security teams have noted this page as a primary vector for credential theft, wallet address interception, and subsequent fund misappropriation within the crypto community. Any user who accessed home-ledger-app.webflow.io should immediately cease interaction and assume compromise of credentials entered on the page. Revoke Ledger Live permissions within the official app settings, transfer any remaining assets to cold storage, and perform a full device audit for potential malware. Report the incident to Ledger support and consider rotating all cryptocurrency wallet addresses exposed during the visit. Use PhishDestroy’s full report to monitor updates on this domain and block related infrastructure at the firewall or DNS level.