web-ledgr-livee[.]pages[.]dev

PhishDestroy has flagged web-ledgr-livee.pages.dev for active brand impersonation targeting Ledger users. The domain leverages a visually deceptive replica of Ledger’s official site, likely embedding a drainer kit to siphon cryptocurrency from unsuspecting victims. The site mimics official branding with high fidelity, increasing the risk of successful deception.

Technical indicators confirm this domain as malicious. VirusTotal currently scores it 4/95 detections, indicating low detection rates by antivirus engines. Registered through Cloudflare, Inc., the domain resolves to IP 188.114.96.3 and operates under a Google Trust Services SSL certificate, adding a false sense of legitimacy. While the exact creation date is undisclosed, the domain’s recent flagging suggests it is part of an emerging campaign.

This domain remains active with a status of 'under_investigation,' and no known takedown actions have been confirmed. Users are strongly advised to avoid interaction and report the domain to Ledger’s official fraud channels. Remaining risk is assessed as moderate-to-high until the domain is neutralized, with potential for expanded targeting of Ledger ecosystem users.