zero-ledgers-en[.]pages[.]dev

This domain, zero-ledgers-en.pages.dev, is identified as an active high-risk phishing site specializing in brand impersonation. The site mimics Ledger, a well-known cryptocurrency hardware wallet provider, with the intent to deceive users into downloading malicious software or disclosing sensitive credentials. Analysis confirms the domain is currently operational and poses a direct threat to individuals managing cryptocurrency assets. Infrastructure analysis reveals the domain was registered through Cloudflare Pages on August 18, 2025, and resolves to the IP address 172.66.47.25. Security vendor assessments indicate that 8 out of 95 engines on VirusTotal flag this domain as malicious. The page title, "Ledger Live Desktop® | Secure Crypto Management Platform," closely mirrors legitimate Ledger branding, increasing the likelihood of successful deception. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services under the identifier WE1, which does not inherently indicate legitimacy due to the prevalence of automated certificate issuance for malicious domains. As of the latest assessment, zero-ledgers-en.pages.dev remains active and continues to host phishing content. Users are strongly advised to avoid interacting with this domain and to verify the authenticity of any Ledger-related communications or software downloads through official channels. Network administrators should implement blocking measures for this domain and its associated IP address. Additionally, affected individuals should monitor their systems for unauthorized access or transactions and consider revoking any credentials potentially exposed to this phishing site.