ledger-r-live[.]pages[.]dev

This domain, ledger-r-live.pages.dev, operates as a brand impersonation threat targeting users of Ledger cryptocurrency wallets. The site presents itself as the legitimate Ledger Live Wallet interface, using the page title 'Ledger Live Wallet — Manage Crypto Securely' to deceive visitors into believing they are interacting with an official platform. Such impersonation schemes typically aim to harvest sensitive credentials, private keys, or seed phrases, enabling attackers to gain unauthorized access to victims' crypto assets. The elevated risk level stems from the domain's ability to convincingly replicate trusted branding, increasing the likelihood of successful deception among less cautious users. Analysis indicates that ledger-r-live.pages.dev was registered through Cloudflare, Inc., with a creation date of April 18, 2026, though this appears to be an anomalous or spoofed registration timestamp. The domain resolves to the IP address 172.66.47.195 and is hosted under an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. Detection metrics reveal limited but concerning visibility: only 1 out of 95 security vendors on VirusTotal flagged the domain as malicious, while Gridinsoft assigned a trust score of 0/100. The domain appears on a single security blocklist and was actively blocked by PhishDestroy, suggesting targeted identification by specialized threat intelligence platforms. Users who visited ledger-r-live.pages.dev should immediately cease all interaction with the site and assume any entered credentials or private keys have been compromised. It is critical to revoke access to any connected crypto wallets and transfer assets to a new, secure wallet using a trusted device. Enable multi-factor authentication on all accounts and monitor for unauthorized transactions. If sensitive information was submitted, consider reporting the incident to relevant cybersecurity authorities or the impersonated brand's official support channels for further mitigation guidance. Regularly update security software and verify domain authenticity before entering credentials on any platform.