livelgr-io-en[.]pages[.]dev

This domain is flagged as a brand impersonation threat targeting users of Ledger, a hardware cryptocurrency wallet provider. The site mimics the official Ledger Live interface with the page title 'Ledger®Live — Your Gateway to Secure Crypto Access,' attempting to deceive visitors into entering sensitive wallet credentials or recovery phrases. Such impersonation attacks are commonly used to drain cryptocurrency assets from unsuspecting victims by exploiting trust in well-known brands. Analysis indicates the domain was registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services. The site resolves to the IP address 188.114.97.3 and was created on April 30, 2026, an unusual future date that strongly suggests fraudulent intent. VirusTotal reports 0 out of 95 security engines flagging the domain, though it appears on one security blocklist and has a Gridinsoft trust score of 0 out of 100. The use of HSTS and HTTP/3 further suggests an attempt to appear legitimate, despite the site being taken offline following detection. If you visited livelgr-io-en.pages.dev or entered any information, immediate action is required. Disconnect the device from the internet to prevent potential data exfiltration. Reset all passwords and recovery phrases associated with cryptocurrency wallets, particularly Ledger accounts. Monitor wallet transactions for unauthorized activity and consider revoking access to any connected applications. Report the incident to relevant security teams and law enforcement if financial loss occurred. Always verify domain authenticity by cross-checking official sources before entering credentials.