ledgeer-live-en[.]pages[.]dev

PhishDestroy has identified ledgeer-live-en.pages.dev as a brand impersonation phishing domain specifically targeting users of Ledger Live, a popular cryptocurrency wallet and portfolio manager. This domain was designed to deceive visitors into believing they are accessing the official Ledger Live platform, with the page title exactly matching the legitimate service: "Ledger Live — Secure Crypto Wallet & Portfolio Manager." The threat type is categorized as brand impersonation, and while no specific drainer kit was identified, the nature of the phishing suggests it aims to harvest login credentials or seed phrases from unsuspecting crypto users.

Technical indicators from the investigation reveal that this domain was created on September 26, 2025, and is registered through Cloudflare, Inc. It resolves to IP address 188.114.96.3 and is secured with an SSL certificate from Google Trust Services (WE1). VirusTotal analysis shows that 12 out of 95 security vendors flagged this domain as malicious, and it already appears on one security blocklist. Google Safe Browsing status has not been explicitly stated, but the domain's presence on blocklists and vendor flags indicates a high likelihood it would be blocked. The unique seed for this report is 4cb491, which helps track this specific threat.

The current status of this domain is taken offline, meaning it is no longer accessible to potential victims. This takedown was likely a result of security vendor reports or hosting provider intervention. However, even though the domain is offline, residual risk remains as similar domains may be created by the same threat actors. Users are urged to always verify URLs before connecting their wallets or entering sensitive information. PhishDestroy recommends double-checking the official Ledger Live URL (ledger.com) and using bookmark or trusted sources to avoid falling for lookalike domains. If you have interacted with this domain, change your credentials immediately and enable two-factor authentication where possible.