ldgrlive-walwt[.]pages[.]dev

This domain is flagged for brand impersonation targeting Ledger, a hardware wallet provider. Analysis indicates the site mimics the official Ledger Live Wallet interface, presenting a high-risk vector for cryptocurrency credential theft. The page title, 'Ledger Live Wallet — Getting Started | Official Ledger Live App,' is designed to deceive users into believing they are interacting with legitimate Ledger infrastructure, potentially leading to unauthorized access to wallet credentials or private keys. Infrastructure analysis reveals the domain was registered on February 26, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.47.183. It appears on one security blocklist and is flagged by 1 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to malicious sites. The domain remains active, increasing the likelihood of ongoing exploitation attempts. Users who have visited ldgrlive-walwt.pages.dev should immediately revoke any credentials or private keys entered on the site. Monitor associated cryptocurrency wallets for unauthorized transactions and consider migrating funds to a new wallet if exposure is suspected. Report the domain to relevant security teams for further investigation and block the domain and its resolving IP (172.66.47.183) at the network level to prevent additional access. Exercise heightened caution with any communications or sites claiming affiliation with Ledger, particularly those not hosted on the official ledger.com domain.