ledglive-walk[.]pages[.]dev

Ledglive-walk.pages.dev is an active phishing domain impersonating Ledger, a popular cryptocurrency wallet provider. The domain is flagged as malicious by 7 out of 94 vendors on VirusTotal, highlighting its potential threat. It is also listed on one public blocklist, specifically by PhishDestroy. This domain is hosted on an IP in Canada under Cloudflare, Inc., with an SSL certificate issued by Google Trust Services.

The phishing site aims to deceive users into believing they are interacting with the legitimate Ledger Live platform, which is used to manage and secure cryptocurrencies. The page title, "Ledger Live - Secure and Manage Your Cryptocurrencies | Ledger Live," is designed to mimic the official Ledger branding and lure unsuspecting users into providing sensitive information.

Despite its recent creation date of April 19, 2026, ledglive-walk.pages.dev has already been identified by PhishDestroy on the same day, demonstrating the effectiveness of early detection systems. The platform risk score of 83 out of 100 further underscores the high threat level posed by this domain. This case exemplifies the ongoing risks in the cryptocurrency sector, where threat actors continuously exploit brand trust to execute phishing attacks.