ldger-live-app[.]pages[.]dev

PhishDestroy has identified ldger-live-app.pages.dev as a high-risk brand impersonation domain, actively targeting users of the cryptocurrency hardware wallet company Ledger. This phishing site masquerades as the legitimate Ledger Live application, displaying the title "✦ Ledger Live Download – Official App ✦" to deceive visitors into downloading malware or revealing their recovery phrases. The domain leverages a drainer kit to steal cryptocurrency assets from unsuspecting victims.

The technical indicators paint a clear picture of malicious intent. The domain scores 16 out of 95 on VirusTotal, with 16 security vendors flagging it as malicious. It was registered through Cloudflare, Inc. on April 04, 2026, and resolves to IP address 188.114.97.3. Its SSL certificate is issued by Google Trust Services (WE1), lending a false sense of legitimacy. The domain currently appears on 1 security blocklist and is not listed on Google Safe Browsing, meaning it may evade some browser-based protections.

As of this analysis, the domain remains active and continues to pose a significant threat to Ledger users. PhishDestroy recommends that all users avoid visiting the site or entering any personal information. Ledger customers should only download the official Ledger Live app from the official Ledger website or authorized app stores. Immediate action should include reporting the domain to relevant authorities and blocking it at the network level to mitigate further risk. Users who have already interacted with the site should change their passwords and enable two-factor authentication on their accounts.