en-ledgrlive-access[.]pages[.]dev

The domain en-ledgrlive-access.pages.dev is suspected of being a brand impersonation threat targeting Ledger, a well-known cryptocurrency hardware wallet provider. The domain appears to mimic the official Ledger Live Wallet landing page, potentially to deceive users into providing sensitive information or downloading malicious software.

Technical analysis of the domain reveals the following indicators: VirusTotal detection score of 0/95, indicating that the domain has not been flagged by any of the 95 security engines; registered through Cloudflare Pages; resolves to IP address 172.66.47.2; created on March 27, 2026; appears on 1 security blocklist; and is still active. The SSL certificate is issued by Google Trust Services / WE1, which might lend an air of legitimacy to the site.

The current status of the domain is active, and it remains under investigation. Organizations and users are advised to avoid interacting with this domain until further analysis is completed. The lack of detections on VirusTotal and the use of a reputable SSL certificate issuer highlight the need for heightened awareness and additional verification steps to mitigate the remaining risk.