live-ledgr-eng-en[.]pages[.]dev

This domain, live-ledgr-eng-en.pages.dev, is identified as a cryptocurrency phishing site designed to impersonate Ledger wallet services. Analysis indicates the infrastructure was configured to harvest wallet credentials or private keys through a spoofed interface, though no specific drainer kit signatures were confirmed in available telemetry. The domain mimics legitimate Ledger branding, using terms like 'ledgr' and 'eng-en' to deceive users into believing it is an official support or firmware update portal. Infrastructure analysis reveals the domain resolves to IP address 188.114.97.3, hosted through a content delivery network. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy. The domain was registered on April 06, 2026, an anomalous future date suggesting either a data entry error or deliberate obfuscation. VirusTotal reports 13 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is actively blocked by endpoint protection systems. As of the latest assessment, live-ledgr-eng-en.pages.dev has been taken offline, likely following abuse reports or automated takedown procedures. Despite its current inactive status, the domain remains a residual risk due to potential re-registration or DNS reactivation. Users who interacted with this domain are advised to revoke any wallet permissions, rotate credentials, and monitor connected accounts for unauthorized transactions. Organizations should update blocklists to prevent future access attempts and alert users to similar phishing patterns targeting cryptocurrency infrastructure.