base-ledgerlive-eng[.]pages[.]dev

PhishDestroy identifies base-ledgerlive-eng.pages.dev as an active brand impersonation scam targeting Ledger users. This domain mimics the official Ledger Live platform to deceive victims into entering sensitive recovery phrases or seed phrases. Once harvested, these credentials enable direct theft of cryptocurrency assets stored in Ledger wallets. This domain remains undetected on 95 VirusTotal engines and is registered through Cloudflare, resolving to IP 188.114.97.3 secured by a Google Trust Services SSL certificate. The use of Cloudflare Pages hosting suggests an attempt to appear legitimate while bypassing traditional blocklists. As of current analysis, no major threat intelligence platforms have flagged this domain, increasing the risk of successful compromise for unaware users. If you visited base-ledgerlive-eng.pages.dev, immediately cease interaction with the site and disconnect any connected devices from the internet. Do not enter any seed phrases, recovery phrases, or wallet credentials. Scan your device using up-to-date antivirus software and consider revoking any credentials exposed during the visit. Report the domain to Ledger’s official support channels and your local cybercrime unit to help prevent further victimization.