ldgr-live-wallet-docs[.]pages[.]dev

This domain, ldgr-live-wallet-docs.pages.dev, poses a high-risk threat of brand impersonation, specifically targeting the cryptocurrency hardware wallet brand Ledger. The site uses a deceptive page title, 'Ledger Live Wallet — Official Site In Your Device,' to mislead users into believing they are accessing an official Ledger resource. This can result in users inadvertently providing sensitive information such as login credentials or private keys, leading to potential financial loss.

Analysis indicates that the domain was created on March 22, 2026, and has been flagged by 16 out of 95 security vendors on VirusTotal as malicious. The domain appears on one security blocklist and is registered through Cloudflare, Inc. The IP address 172.66.44.164, which is associated with the domain, is located in California, USA, and uses an SSL certificate from Google Trust Services / WE1. Google Safe Browsing has also flagged this domain as a phishing site. These factors strongly suggest that the domain is part of a sophisticated phishing campaign designed to impersonate Ledger.

If users have visited ldgr-live-wallet-docs.pages.dev, they are advised to immediately change their Ledger account passwords and review their account activity for any unauthorized transactions. Users should also enable two-factor authentication (2FA) if not already configured and monitor their financial accounts for suspicious activity. Reporting the incident to Ledger's official support channels is recommended to ensure timely assistance and to contribute to ongoing security efforts.