ldgrress-live[.]pages[.]dev

This domain, ldgrress-live.pages.dev, is flagged as a high-risk phishing infrastructure designed to impersonate Ledger, a cryptocurrency hardware wallet provider. The site presents a fraudulent version of the Ledger Live application under the title "Ledger Live Wallet — Technical Edition," targeting users with the intent to harvest sensitive credentials, recovery phrases, or private keys. Analysis indicates the domain is actively mimicking legitimate Ledger services, leveraging social engineering to deceive victims into disclosing authentication details or installing malicious software. Infrastructure analysis reveals the domain was registered on April 04, 2026, through Cloudflare, Inc., and currently resolves to the IP address 172.66.47.165, located in Canada. The SSL certificate, issued by Google Trust Services (WE1), suggests the site is configured to appear secure, further enhancing its deceptive capabilities. The domain is blocked by one security blocklist, while VirusTotal reports 4 out of 95 security vendors flagging it as malicious. The page title, "Ledger Live Wallet — Technical Edition," explicitly aligns with Ledger’s branding, reinforcing the impersonation attempt. Users who have visited ldgrress-live.pages.dev or interacted with its content should immediately revoke any connected wallet permissions and cease further engagement. If credentials or recovery phrases were entered, affected parties must transfer assets to a new, secure wallet and monitor accounts for unauthorized transactions. Devices used to access the domain should undergo a full security scan to detect potential malware. Additionally, reporting the domain to relevant security teams or cryptocurrency abuse platforms can aid in mitigating further threats from this infrastructure.