hub-ledgrlive-auths-x[.]pages[.]dev

PhishDestroy identifies hub-ledgrlive-auths-x.pages.dev as an active brand impersonation phishing domain that mimics Ledger Live, a widely used cryptocurrency wallet application. The site is designed to deceive users into entering their Ledger Live credentials by presenting fake login interfaces and authentication prompts. Once obtained, these stolen credentials allow threat actors to drain cryptocurrency assets directly from victims' wallets. This domain represents a significant risk to individuals and organizations that store digital assets using Ledger devices. This domain was flagged by 9 out of 95 security vendors on VirusTotal, indicating elevated detection across multiple threat intelligence platforms. Registered through Cloudflare, Inc., the domain resolves to IP address 188.114.97.3 and operates under a Google Trust Services SSL certificate to appear legitimate. Such tactics are commonly used to build trust and bypass basic security checks. The use of Cloudflare’s infrastructure suggests an attempt to evade detection while maintaining high availability for phishing operations. If you have visited this domain, immediately check your Ledger Live application and hardware wallet for unauthorized transactions. Do not enter any credentials or sensitive information on this site. Disconnect any devices from your computer, run a full malware scan using reputable antivirus software, and consider revoking any session tokens or API keys exposed during your visit. Report the incident to Ledger support and file a complaint with your local cybercrime unit. Sharing this alert helps protect others from falling victim to similar attacks.