ledger-live-walett[.]pages[.]dev

The domain ledger-live-walett.pages.dev is flagged for high-risk brand impersonation, specifically targeting users of the Ledger Live crypto wallet. This domain impersonates the official Ledger Live platform, potentially misleading users into believing they are interacting with a legitimate service. The threat could involve fake login pages designed to steal user credentials or other sensitive information.

Infrastructure analysis reveals that the domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.44.60, which is located in the United States and associated with AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. The domain was created on September 11, 2025. As of the latest scan, 1 out of 95 security vendors on VirusTotal flagged this domain as malicious. The domain also appears on 1 security blocklist and is currently blocked by PhishDestroy.

The domain is still active, posing a significant risk to users who may be tricked into visiting it. Immediate response actions include blocking the domain at the network level, educating users about the threat, and monitoring for any related malicious activities. Despite the current blocklist and partial detection by security vendors, the remaining risk is high, and additional measures should be taken to protect against potential credential theft or other malicious actions.