ledfegrlikve-downlod[.]webflow[.]io

PhishDestroy identifies ledfegrlikve-downlod.webflow.io as an active phishing site impersonating the official Ledger Live crypto wallet. The fraudulent page is titled 'Ledger Live Download Crypto Wallet App' and directs visitors to a counterfeit download page meant to steal cryptocurrency funds. This site poses a high-risk threat to any visitor who attempts to download software from it, as any entered credentials or seeded wallet data could be intercepted by attackers. Ledger users are specifically targeted through look-alike branding and misspelled domain names that mimic the legitimate Ledger ecosystem.

This domain was flagged by 21 out of 95 security vendors on VirusTotal, indicating strong consensus about its malicious nature. The domain resolves to IP address 104.18.36.248 and uses an SSL certificate issued by Google Trust Services, which may give visitors a false sense of security. While the exact creation date isn't visible in public records, the domain remains active at the time of this report, continuing to serve malicious content to unsuspecting users.

If you visited ledfegrlikve-downlod.webflow.io, immediately disconnect from the internet to prevent any potential data transmission. Check your device for unauthorized software installations, especially any crypto wallet applications you did not intentionally download. Change all passwords associated with your Ledger wallet and enable two-factor authentication on your legitimate Ledger Live application. Consider transferring your assets to a new, secure wallet if you entered any sensitive information on this fraudulent site. Report the domain to your antivirus provider and consider filing a complaint with relevant cybercrime authorities to help prevent further victimization.