legder-live-apps[.]com

The domain legder-live-apps.com has been identified as a generic phishing site, likely impersonating Ledger, a popular cryptocurrency hardware wallet brand, to steal users' credentials or seed phrases. The site was registered on February 21, 2026, through Web Commerce Communications Limited, and its page title displayed 'Plesk Obsidian 18.0.76,' a common hosting panel, suggesting it may have been a compromised server or a quickly set-up phishing page. The threat type indicates a generic phishing attempt, but the domain name's resemblance to 'ledger-live' strongly suggests a targeted campaign against Ledger users.

Technical indicators paint a clear picture of risk. VirusTotal reports that 5 out of 95 security vendors flag this domain as malicious, indicating moderate detection across the industry. The domain resolves to IP address 172.67.163.21, which is associated with Cloudflare, potentially used to obfuscate the true hosting location. Its SSL certificate is issued by Google Trust Services (WE1), which is common for legitimate sites but can be abused by phishers. The domain appears on one security blocklist, and its creation date is only a few months prior to this analysis, typical of disposable phishing domains. Notably, Google Safe Browsing (GSB) status is not mentioned, but the domain is currently offline.

As of the latest check, legder-live-apps.com has been taken offline, reducing immediate risk. However, users who may have visited the site before it was shut down could still be at risk if they entered sensitive information. It is crucial for Ledger users to verify any communication or website through official channels. PhishDestroy recommends avoiding entering seed phrases or private keys on any website, and always double-checking URLs for typos or slight variations. If you have interacted with this domain, change your passwords immediately and enable two-factor authentication on all associated accounts.