ldgrlive-app-web[.]pages[.]dev

ldgrlive-app-web.pages.dev is actively impersonating Ledger, a popular cryptocurrency hardware wallet brand. The domain is flagged by 1 out of 91 vendors on VirusTotal, indicating a low detection rate, which is typical for newly registered phishing domains. PhishDestroy has added it to its blocklist, highlighting its potential threat. The site masquerades as the official Ledger Live app, aiming to deceive users into divulging sensitive information.

The domain is registered through Cloudflare, Inc., and hosted on an IP address based in Canada. It uses an SSL certificate issued by Google Trust Services, which may lend an appearance of legitimacy to unsuspecting users. The page title, "Ledger Live app® | Official Ledger Mobile & Desktop App," is crafted to mimic the genuine Ledger site closely. This tactic is designed to lure users into a false sense of security, potentially leading to credential theft or unauthorized access to cryptocurrency accounts.

With a platform risk score of 76 out of 100, this domain represents a significant threat to users who may not recognize the subtle differences between the legitimate Ledger site and this fraudulent one. The scam exploits the critical window between domain registration and widespread detection by antivirus vendors, allowing it to operate under the radar initially. PhishDestroy's early detection underscores the importance of proactive threat intelligence in identifying and mitigating such threats before they proliferate widely.