auths-liveledgr-us-en[.]pages[.]dev

This domain, auths-liveledgr-us-en.pages.dev, is currently under investigation and has been flagged as a potential brand impersonation targeting Ledger. The domain was created on April 18, 2026, and remains active as of the report date, July 12, 2026. Analysis indicates that the site is designed to mimic the official Ledger Live Wallet, with a page title that reads 'Ledger Live Wallet (Official) — Secure Bitcoin & Crypto Wallet.' This deceptive page title is likely intended to trick users into believing they are interacting with a legitimate Ledger service, which could lead to the disclosure of sensitive information such as login credentials or private keys. The domain resolves to the IP address 188.114.97.3 and employs several security technologies, including HSTS and HTTP/3, which are often used to enhance the credibility of phishing sites. The SSL certificate is issued by Google Trust Services, further adding to the site's apparent legitimacy. Despite the use of these technologies, the domain has been added to at least one security blocklist, specifically PhishDestroy, indicating a known risk. Gridinsoft has assigned the domain a trust score of 0/100, signaling a complete lack of trust in the site's authenticity. Security researchers and defenders should exercise caution and thoroughly vet any interactions with this domain. Given the current status and the impersonation of a well-known brand, it is advisable to block or flag this domain in network security configurations to prevent unauthorized access. Additionally, monitoring for any attempts to resolve or connect to the IP address 188.114.97.3 may help in identifying and mitigating potential threats. Defenders should also educate users about the risks of visiting unverified websites and encourage them to verify the URL and SSL certificate before entering any sensitive information. Further investigation is warranted to determine the full scope of the threat and the methods used to distribute this phishing site.