nav-ledgrlog-liv[.]wasmer[.]app

The domain nav-ledgrlog-liv.wasmer.app is assessed as having an elevated risk level due to its specific threat type of brand impersonation. This domain is designed to mimic the legitimate Ledger Live login page, potentially tricking users into submitting their credentials and sensitive information.

Analysis indicates that the domain has been flagged by 19 out of 95 security vendors on VirusTotal, suggesting a notable level of suspicion among the security community. The domain is registered through Squarespace Domains II LLC, and it resolves to the IP address 62.210.172.150, which is located in France and is part of the AS12876 Scaleway SAS network. The domain appears on one security blocklist, specifically PhishDestroy. The page title, 'Ledger Live Login – Access Your Secure Crypto Portfolio,' further confirms the intent to impersonate Ledger and gain user trust. The domain is currently offline, which may indicate that it has been taken down by authorities or the registrar in response to security reports.

To mitigate the risk associated with this brand impersonation threat, users are advised to verify the URL and domain name of any Ledger Live login page before entering their credentials. Organizations should update their security awareness training to include examples of such domain impersonations and educate employees on the importance of double-checking URLs. Additionally, implementing DNS-based security solutions and maintaining up-to-date blocklists can help prevent access to similar malicious domains. Network administrators should monitor for any internal traffic directed to this or related domains and take immediate action to block such connections.