ledgcom-live-us[.]pages[.]dev

This domain, ledgcom-live-us.pages.dev, is flagged as an active phishing infrastructure specifically targeting Ledger cryptocurrency wallet users. Analysis indicates the site employs brand impersonation tactics, presenting itself as the legitimate Ledger Live platform with an identical page title: Ledger Live - Secure and Manage Your Cryptocurrencies | Ledger Live. The domain appears designed to harvest cryptocurrency wallet credentials and private keys through fraudulent interface replication, a common vector for crypto asset theft operations. Infrastructure analysis reveals multiple high-risk technical indicators. The domain resolves to IP address 188.114.96.3, hosted on Cloudflare infrastructure in Canada, and was registered through Cloudflare Pages on April 01, 2026. Security vendor detection shows 11/95 engines on VirusTotal flagging the domain as malicious, while it appears on one security blocklist and is actively blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), providing a false sense of security to potential victims. Current status remains active as of assessment, with no takedown observed. The domain continues to resolve and serve content, maintaining its fraudulent interface. While some security vendors have detected the threat, the domain's Cloudflare hosting provides resilience against immediate takedown. Users are advised to verify domain authenticity through official Ledger channels only, as this infrastructure remains a high-risk vector for cryptocurrency theft. The combination of brand impersonation, recent registration, and security vendor detections confirms this as a sophisticated phishing operation requiring immediate attention from security teams and potential victims.