Hello Security Team,
I would like to report an active phishing campaign that is currently stealing cryptocurrency by impersonating Ledger.
The phishing infrastructure includes:
• https://ledger-live-web.io
• https://app.ledger-live-web.io
• https://ledger.com-webapps.com
These websites perfectly imitate the official Ledger interface and trick users into entering their 24-word recovery phrase and other wallet credentials. Once submitted, attackers immediately gain full access to victims' wallets and steal their cryptocurrency.
This is an organized criminal phishing operation involving:
- Ledger brand impersonation
- Recovery phrase harvesting
- Credential theft
- Identity theft
- Cryptocurrency theft and financial fraud
Unfortunately, the registrar has ignored abuse reports and continues to keep these phishing domains online, allowing criminals to keep stealing from new victims every day.
I kindly ask your security team to investigate these domains and, if possible, assist with reporting them to the appropriate registrars, hosting providers, Safe Browsing services, phishing databases, and any other abuse contacts you work with. Any additional assistance in taking down this phishing infrastructure would help protect the entire cryptocurrency community, not just users of one wallet.
These are active phishing websites being used right now to steal users' recovery phrases and cryptocurrency. They should be blocked and taken offline as soon as possible.
Thank you for your help and for protecting the crypto community.
Hello Security Team,
I would like to report an active phishing campaign that is currently stealing cryptocurrency by impersonating Ledger.
The phishing infrastructure includes:
• https://ledger-live-web.io
• https://app.ledger-live-web.io
• https://ledger.com-webapps.com
These websites perfectly imitate the official Ledger interface and trick users into entering their 24-word recovery phrase and other wallet credentials. Once submitted, attackers immediately gain full access to victims' wallets and steal their cryptocurrency.
This is an organized criminal phishing operation involving:
Unfortunately, the registrar has ignored abuse reports and continues to keep these phishing domains online, allowing criminals to keep stealing from new victims every day.
I kindly ask your security team to investigate these domains and, if possible, assist with reporting them to the appropriate registrars, hosting providers, Safe Browsing services, phishing databases, and any other abuse contacts you work with. Any additional assistance in taking down this phishing infrastructure would help protect the entire cryptocurrency community, not just users of one wallet.
These are active phishing websites being used right now to steal users' recovery phrases and cryptocurrency. They should be blocked and taken offline as soon as possible.
Thank you for your help and for protecting the crypto community.