ledger-live-us-any[.]pages[.]dev

This domain carries an elevated risk level due to specific brand impersonation of Ledger, a well-known cryptocurrency hardware wallet provider. The threat type is brand impersonation, where the fraudulent site mimics the legitimate Ledger Live application to trick users into revealing sensitive information such as recovery phrases or login credentials. The page title, 'Ledger Live | Easy, Secure, and Official Wallet App,' is designed to deceive visitors into believing they are on the authentic platform.

Technical indicators provide a clear picture of the threat. The domain was registered through Cloudflare, Inc. and resolves to IP address 172.66.44.138. It was created on September 27, 2025, and has an SSL certificate issued by Google Trust Services / WE1. VirusTotal analysis shows that only 1 out of 95 security vendors flagged this domain as malicious, and it appears on 1 security blocklist. Despite the low flag rate, the domain is currently offline, which suggests that it may have been taken down after detection.

Users who encounter this domain should take immediate action. Since the site impersonates Ledger, anyone who may have visited it should change their Ledger Live passwords and enable two-factor authentication immediately. It is also recommended to run a security scan on their device for any malware. To avoid future threats, always verify the official URL of Ledger Live, which is ledger.com, and never download software from third-party sources. PhishDestroy advises reporting any similar domains to relevant authorities and staying informed about common phishing tactics targeting cryptocurrency users.