access-liveledger-en[.]pages[.]dev

The domain access-liveledger-en.pages.dev is associated with a phishing scam involving brand impersonation. It specifically targets users of the Ledger brand, attempting to deceive them into believing they are interacting with the legitimate Ledger Live App. Currently, the site has been taken offline, reducing the immediate risk, but it remains important for potential victims to be aware of its existence and the threat it posed.

Technical indicators for access-liveledger-en.pages.dev include its detection by 1 of 95 security vendors on VirusTotal, specifically flagged by Phishing Database. The domain was created on September 24, 2025, and registered through Cloudflare, Inc., with an IP address of 188.114.97.3. It appears on one security blocklist, PhishDestroy, and the SSL certificate was issued by Google Trust Services / WE1. The page title observed was 'Ledger Live App | Mobile Crypto Management', and it utilized technologies such as Tailwind CSS, HSTS, Cloudflare, and HTTP/3.

For those who may have interacted with access-liveledger-en.pages.dev, it is crucial to take immediate safety steps. If cryptocurrency credentials were compromised, users should revoke any token approvals and transfer their funds to a secure wallet. In cases of credential or login phishing, it is recommended to change all affected passwords, enable two-factor authentication, and monitor financial accounts for any signs of fraud. Reporting such incidents to relevant authorities and platforms can help mitigate further risks.