ledgerlikeapp[.]netlify[.]app

PhishDestroy has identified ledgerlikeapp.netlify.app as a high-risk brand impersonation threat. This domain is actively mimicking the legitimate Ledger platform, likely to deceive users into revealing their cryptocurrency wallet credentials or private keys. The specific threat is a phishing campaign targeting Ledger customers, exploiting the trusted brand name to harvest sensitive financial information.

Technical analysis reveals that the domain is registered through Netlify and resolves to IP address 63.176.8.218. Alarmingly, 12 out of 95 security vendors on VirusTotal flag this domain as malicious, and it currently appears on one security blocklist. The page title is set to "Ledger Live" to further impersonate the official service, and it uses an SSL certificate issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), which may lend a false sense of security to visitors. Despite these red flags, the domain remains active and accessible.

Users who encounter ledgerlikeapp.netlify.app should immediately close the page and avoid entering any personal information, especially Ledger wallet recovery phrases or login credentials. To stay safe, always verify the official URL for Ledger services (ledger.com) and enable two-factor authentication on your accounts. Report this phishing domain to security teams and consider using anti-phishing browser extensions for added protection. PhishDestroy recommends that all Ledger users remain vigilant against unsolicited requests for private keys.