live-eng-ledgr[.]pages[.]dev

PhishDestroy identifies live-eng-ledgr.pages.dev as a live Ledger wallet phishing page currently impersonating the Ledger cryptocurrency wallet ecosystem. The domain is active and propagating credential-harvesting content via Google Pages, targeting users under the guise of an official Ledger financial management interface. Immediate action is required to contain exposure and prevent account compromise. live-eng-ledgr.pages.dev was flagged by 2 of 95 VirusTotal vendors as of seed 60dcbb, indicating zero current detection despite known malicious hosting infrastructure. The domain resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc. The Google Trust Services SSL certificate adds a false veneer of legitimacy, masking its malicious origin. Creation date and blocklist inclusion metrics remain undisclosed in public feeds, but the absence of detections suggests an emerging or highly targeted campaign. The domain remains active and accessible via HTTPS, posing an elevated risk to users interacting with Ledger-branded content. PhishDestroy recommends blocking IP 188.114.96.3 at the network perimeter and disabling resolution of live-eng-ledgr.pages.dev through DNS enforcement. Users should verify all Ledger communications via official channels only and report any interaction with this domain to Ledger Support immediately.