ledgrs--oi-live[.]pages[.]dev

This domain, ledgrs--oi-live.pages.dev, poses as the official Ledger Live login portal to deceive cryptocurrency users into entering their wallet credentials. The site mimics the legitimate Ledger interface, presenting a page titled 'Ledger® Live: Login | Secure Access to Your Wallet' to create a false sense of legitimacy. Victims who input their recovery phrases or private keys risk immediate theft of their digital assets, as attackers can drain funds from connected wallets without further interaction. The threat is particularly insidious due to its polished appearance and use of security indicators like HSTS and a valid SSL certificate from Google Trust Services. Analysis indicates this domain is part of a coordinated phishing campaign. It was registered on March 24, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.96.3. Security vendors on VirusTotal flagged the domain as malicious, with 8 out of 95 engines detecting it as a threat. The domain appears on one security blocklist, and Gridinsoft assigns it a trust score of 0/100. Additional technical indicators include the use of Cloudflare’s infrastructure and HTTP/3 protocol, which may help the site evade basic detection mechanisms. The domain is currently offline, likely taken down following reports, but similar infrastructure may resurface under different names. Users who visited ledgrs--oi-live.pages.dev and entered sensitive information should assume their credentials or recovery phrases are compromised. Immediately disconnect any wallets linked to the site and transfer remaining assets to a new, secure wallet. Enable two-factor authentication on all accounts and monitor for unauthorized transactions. If hardware wallets were connected, consider them potentially exposed and generate new keys. Report the incident to relevant platforms and security teams to aid in tracking the threat actors. Future interactions with Ledger-related services should be verified through official channels only, avoiding links from emails, social media, or search results.