en-app-ladgrlive[.]pages[.]dev

The phishing domain en-app-ladgrlive.pages.dev actively impersonates Ledger, a popular cryptocurrency wallet service. This domain, registered through Cloudflare, Inc., is flagged by 5 out of 91 vendors on VirusTotal, indicating its malicious nature. The site aims to deceive users by mimicking the official Ledger Live Wallet app, as evidenced by its page title.

En-app-ladgrlive.pages.dev is hosted on an IP address (188.114.96.3) located in Canada, with Cloudflare, Inc. as the hosting organization. The SSL certificate is issued by Google Trust Services, adding a layer of perceived legitimacy to unsuspecting users. The domain's creation and detection date align on April 29, 2026, suggesting it was swiftly identified by PhishDestroy's systems.

This domain's presence on a public blocklist, specifically PhishDestroy's, underscores its threat level. The platform risk score of 83/100 further highlights the potential danger it poses to users seeking to access legitimate Ledger services. Phishing domains like this exploit the critical 24-72 hour window post-registration, often bypassing initial antivirus detections. PhishDestroy's proactive monitoring captures such threats early, protecting users before they propagate through traditional security channels.