home-ledgegr[.]pages[.]dev

The domain home-ledgegr.pages.dev is actively impersonating Ledger, a well-known cryptocurrency hardware wallet provider. This phishing site is designed to deceive users into believing they are accessing the legitimate Ledger Live platform. The page title, "Ledger Live - Simplified Crypto Management," is crafted to mimic the authentic Ledger service, aiming to lure unsuspecting users into divulging sensitive information.

With 13 out of 91 vendors on VirusTotal flagging this domain as malicious, it is evident that the threat has been recognized by multiple security entities. The domain is also listed on one public blocklist, maintained by PhishDestroy. This highlights the significant risk it poses to users who may be tricked into entering their credentials or recovery phrases, potentially leading to unauthorized access to their cryptocurrency assets.

The domain is hosted on Cloudflare Pages with an IP address of 172.66.44.96 and uses an SSL certificate issued by Google Trust Services. Despite the security measures typically associated with these services, the domain's creation and immediate detection by PhishDestroy on the same day, June 9, 2026, underscore its malicious intent. The platform risk score of 98 out of 100 further indicates the high level of threat associated with this domain.

PhishDestroy's early detection capabilities allow it to identify such threats in the critical window before they are widely recognized by antivirus databases. This proactive approach is crucial in mitigating the risks posed by fresh phishing domains like home-ledgegr.pages.dev, which exploit the initial lag in detection by traditional security vendors.