doc-live-ledger-app[.]pages[.]dev

This domain poses a significant threat as a brand impersonation attack, specifically targeting the cryptocurrency management brand Ledger. By mimicking the official Ledger Live App, the domain attempts to deceive users into divulging sensitive information or installing malicious software, which can lead to financial loss or identity theft.

Analysis indicates that doc-live-ledger-app.pages.dev was registered through Cloudflare, Inc., and created on April 24, 2026. The domain resolves to the IP address 172.66.45.32, which is located in CA, managed by Cloudflare. On VirusTotal, 3 out of 95 security vendors flag this domain as a brand impersonation threat. The SSL certificate is issued by Google Trust Services / WE1, which can give users a false sense of security. Additionally, the domain appears on one security blocklist, further confirming its malicious nature. The fact that the domain is still active and has been blocked by PhishDestroy adds to the risk.

If a user has visited doc-live-ledger-app.pages.dev, it is crucial to take immediate action. First, change any passwords or credentials that were entered on the site, especially those associated with cryptocurrency wallets or financial accounts. Next, run a full system scan using reputable antivirus software to detect and remove any potential malware. Finally, report the incident to the official Ledger support team and any relevant financial institutions to ensure that accounts are monitored for unauthorized activity. Staying vigilant and informed about the latest security threats is essential to protect against such attacks.