What are the subjects of the phishing (domains, URLs or IPs)?
https://live-en-desktop.hashnode.dev/eng
What are the impersonated domains?
Where or how did you discover this phishing?
I discovered this phishing website during routine monitoring and investigation of cryptocurrency-related phishing campaigns.
The domain was identified while reviewing websites impersonating Ledger and Ledger Live services.
Do you have a screenshot?
Screenshot
Related external source
https://ledger.com
Additional Information or Context
The website impersonates Ledger Live and is not affiliated with Ledger.
The domain uses Ledger-related branding and naming conventions to create a false impression of legitimacy. Such phishing websites are commonly used to steal wallet recovery phrases (seed phrases), login credentials, and cryptocurrency assets.
Users may mistakenly trust the website because it appears to be an official Ledger resource. Immediate review and blocking are recommended to prevent financial loss and credential theft.
Screenshots have been attached as evidence.
What are the subjects of the phishing (domains, URLs or IPs)?
https://live-en-desktop.hashnode.dev/engWhat are the impersonated domains?
https://ledger.comWhere or how did you discover this phishing?
I discovered this phishing website during routine monitoring and investigation of cryptocurrency-related phishing campaigns.
The domain was identified while reviewing websites impersonating Ledger and Ledger Live services.
Do you have a screenshot?
Screenshot
Related external source
https://ledger.com
Additional Information or Context
The website impersonates Ledger Live and is not affiliated with Ledger.
The domain uses Ledger-related branding and naming conventions to create a false impression of legitimacy. Such phishing websites are commonly used to steal wallet recovery phrases (seed phrases), login credentials, and cryptocurrency assets.
Users may mistakenly trust the website because it appears to be an official Ledger resource. Immediate review and blocking are recommended to prevent financial loss and credential theft.
Screenshots have been attached as evidence.