ledgerhomelive[.]pages[.]dev

This domain, ledgerhomelive.pages.dev, is actively flagged as a high-risk brand impersonation site targeting Ledger, a cryptocurrency hardware wallet provider. Analysis indicates the domain was registered on May 3, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.47.56. The page title, 'Ledger Live Wallet — Manage Crypto Securely,' directly mimics the official Ledger Live platform, suggesting an intent to deceive users into interacting with fraudulent infrastructure. The domain is currently listed on one security blocklist and is blocked by PhishDestroy. Infrastructure analysis reveals the use of Cloudflare technologies, including HSTS and HTTP/3, alongside a valid SSL certificate issued by Google Trust Services. While the domain has been scanned by 95 security vendors on VirusTotal, 13 have flagged it as malicious, though the specific nature of the threat (e.g., credential harvesting, malware distribution) remains unconfirmed due to lack of deeper content analysis. Defenders should prioritize blocking this domain at the network level, particularly in environments where cryptocurrency-related services are accessed. The domain's recent registration and active status warrant continuous monitoring for further indicators of compromise or shifts in attack methodology. No evidence of a phishing kit or additional infrastructure linkages is currently available.