welcome-legdr-live[.]pages[.]dev

The domain welcome-legdr-live.pages.dev is an active brand impersonation phishing site targeting Ledger users. This domain, currently still active, was created on April 21, 2026, and is registered through Cloudflare, Inc. It resolves to IP address 172.66.47.27. The page title 'Ledger Start - Secure Your Crypto' is designed to deceive users into believing they are on a legitimate Ledger platform, when in fact it is a fraudulent site aiming to steal sensitive information such as cryptocurrency wallet credentials or recovery phrases.

According to security intelligence, this domain has been flagged by 13 out of 95 VirusTotal vendors, indicating a high level of consensus among security vendors about its malicious nature. It also appears on one security blocklist. These technical indicators, combined with the recent creation date and Cloudflare registration, suggest a sophisticated phishing operation that may be part of a broader campaign. The domain's name, which mimics the legitimate 'ledger' brand with a misspelling ('legdr'), is a common tactic used in phishing to evade detection while still appearing plausible to unsuspecting users.

Given the high risk level and active status, users are strongly advised to avoid visiting this domain under any circumstances. If any credentials or personal information have been entered on this site, they should be considered compromised and changed immediately on the official Ledger platform. Users should also enable two-factor authentication and monitor their accounts for unauthorized activity. To stay safe, always verify the URL before entering sensitive information and rely on official sources for cryptocurrency management. Reporting this domain to relevant authorities and blocklists can help protect others from falling victim to this scam.