ledgr-live-eng-x[.]pages[.]dev

This domain, ledgr-live-eng-x.pages.dev, poses a direct threat as a crypto drainer and credential theft operation impersonating Ledger, a hardware wallet provider. Analysis indicates the site is designed to deceive users into entering recovery phrases or private keys, enabling attackers to drain cryptocurrency wallets. The page title, 'Official Site® | Ledger Login | Getting Started,' reinforces the illusion of legitimacy, while the infrastructure is engineered to harvest sensitive authentication data under false pretenses.

Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.110, located in Canada. The domain was created on March 29, 2026, suggesting either a typo in recorded data or a future-dated registration to evade immediate scrutiny. VirusTotal detection shows 1 out of 95 security vendors flagging the domain as malicious, while it appears on at least one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), provides encrypted connections, further masking the fraudulent nature of the site from casual inspection.

Users who have visited ledgr-live-eng-x.pages.dev or entered credentials on this site should assume compromise. Immediately revoke access to any connected wallets, transfer remaining assets to a new, secure wallet, and monitor all linked accounts for unauthorized transactions. Enable multi-factor authentication where available, and report the incident to the legitimate Ledger support team for further mitigation. Do not interact with the domain or any communications originating from it, as attackers may attempt follow-up social engineering attacks.