en-ledgrlive-wallet[.]pages[.]dev

en-ledgrlive-wallet.pages.dev is a live brand impersonation domain currently under investigation by PhishDestroy. This domain specifically targets Ledger users through deceptive branding. As of this advisory, the site remains active and is being tracked for further malicious behavior. en-ledgrlive-wallet.pages.dev exhibits multiple indicators of fraudulent activity. VirusTotal currently flags 0 of 95 scanning vendors, indicating a low detection rate at this time. The domain resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc., leveraging their infrastructure to obscure its true origin. The SSL certificate is issued by Google Trust Services, adding a misleading layer of legitimacy. These technical attributes are consistent with recently deployed phishing infrastructure designed to evade traditional detection mechanisms. PhishDestroy will continue to monitor en-ledgrlive-wallet.pages.dev for malicious content or infrastructure changes. Users should treat this domain as hostile and avoid interaction. If encountered, report immediately through official channels and block the associated IP range. Organizations are advised to update threat intelligence feeds with this domain, IP, and certificate details to enhance detection across security controls. Proactive blocking at DNS, firewall, and proxy levels is strongly recommended to prevent access.