start-live-ldgr-eng[.]pages[.]dev

PhishDestroy identifies start-live-ldgr-eng.pages.dev as an active brand impersonation domain targeting Ledger’s users. The page mimics the official Ledger Live Wallet interface with a matching page title, ‘Ledger Live Wallet - Secure Crypto Management’, aiming to deceive visitors into divulging sensitive cryptocurrency credentials under the guise of secure wallet management. While no drainer kit is confirmed via available telemetry, the site’s design and branding alignment strongly suggest malicious intent to harvest user data. This domain resolves to IP address 188.114.96.3 and uses a Google Trust Services SSL certificate. It is registered through Cloudflare, Inc. with VirusTotal currently showing 0 detections out of 95 scans as of reporting. The domain’s status remains active and under investigation; it has not yet been flagged broadly by web safety platforms. As of current monitoring, start-live-ldgr-eng.pages.dev remains online and accessible. Users are advised to avoid interaction, report the domain to Ledger and relevant cybersecurity authorities, and ensure browser protections are updated. While the immediate risk to users is elevated due to zero detections, the domain’s active status and clear impersonation vector present a moderate-to-high threat until remediation occurs. Remaining risk includes continued exposure of cryptocurrency users to potential credential theft.