crepto-ladger-live[.]pages[.]dev

The domain crepto-ladger-live.pages.dev has been identified as an active threat engaging in brand impersonation targeting Ledger, a well-known crypto hardware wallet and management platform. Classified under brand impersonation, this domain presents a significant risk of deceiving users into believing they are interacting with legitimate Ledger services, potentially leading to credential theft or crypto asset draining.

Detailed intelligence shows that crepto-ladger-live.pages.dev is still active and resolves to IP address 188.114.96.3. It was registered through Cloudflare, Inc., and uses an SSL certificate issued by Google Trust Services, aiding in the visual deception of legitimacy. The page title found on the site is "Ledger Live — Secure Crypto Management," directly mimicking the authentic Ledger Live application. VirusTotal analysis reveals 0 detections out of 95 vendors, which currently allows it to evade automated detection systems. No blocklist counts or trust scores have been reported yet, indicating the domain is under investigation and not yet widely flagged.

Given the domain's active status and clean VirusTotal report, PhishDestroy strongly advises caution. Users should avoid interacting with this domain and verify the authenticity of Ledger-related websites by navigating directly to official Ledger URLs rather than relying on search results or links received via email or messaging apps. Security teams should monitor this domain closely, update internal blocklists, and inform users of the impersonation attempt to prevent phishing or crypto theft incidents. Immediate reporting and blocking of similar spoofed domains are recommended to mitigate potential risks.