led-ger-dapp[.]pages[.]dev

The domain led-ger-dapp.pages.dev is actively engaged in a brand impersonation scam targeting Ledger users, as confirmed by ongoing SOC analysis under seed 71f6cd. This site is currently live and continues to pose a direct threat to cryptocurrency users seeking legitimate access to Web3 applications.

This domain leverages Cloudflare registration and a Google Trust Services SSL certificate while resolving to IP 188.114.96.3. PhishDestroy identifies it as having zero detections across 95 VirusTotal security vendors and no known blocklist presence—despite clear intent to deceive. The imposter site presents a fraudulent replica of Ledger Live Wallet, falsely claiming secure management of crypto and Web3 dApps.

Given the absence of vendor detection and undetected malicious infrastructure, this domain remains a high-risk threat vector. Users are strongly advised to avoid accessing led-ger-dapp.pages.dev and validate all URLs through official Ledger channels. Any interaction with this domain—especially credential or seed phrase entry—must be treated as a potential compromise. Immediate network blocking and DNS sinkholing are recommended at the enterprise level until vendor flags increase and forensic artifacts are collected.