home-ledgrr-livee-io[.]pages[.]dev

home-ledgrr-livee-io.pages.dev is a live phishing site impersonating Ledger Live, a popular cryptocurrency wallet platform, to harvest user credentials and private keys. This domain poses a high risk to cryptocurrency holders by tricking visitors into entering sensitive data into a fraudulent interface that closely mirrors the official Ledger Live web portal. Upon submission, entered credentials are sent to attacker-controlled servers, enabling direct theft of cryptocurrency assets stored in associated wallets. The site is particularly dangerous due to the irreversible nature of crypto transactions and the irreversible loss of funds once credentials are compromised. Investigations show that home-ledgrr-livee-io.pages.dev has not yet been detected by any of the 95 security engines on VirusTotal, indicating a low detection rate despite clear malicious intent. The domain is registered through Cloudflare, Inc., a common choice among threat actors for anonymity and rapid domain cycling, and resolves to IP address 188.114.96.3. Its SSL certificate, issued by Google Trust Services, adds a false veneer of legitimacy, which is a known tactic to increase user trust. As of the latest analysis, this domain remains active and unblocked by most blocklists, making it accessible to potential victims via phishing emails, fake ads, or malicious links. Users who have visited home-ledgrr-livee-io.pages.dev should immediately check if they entered any Ledger Live credentials or wallet recovery phrases. If so, revoke all session tokens and change passwords on all wallet accounts associated with those credentials. Transfer any remaining funds to a new wallet using a clean, verified device. To prevent future compromise, use hardware wallets for large holdings, enable multi-factor authentication on all crypto accounts, and verify website URLs via official channels before entering sensitive information. Report the domain to your antivirus provider and consider using a dedicated browser extension that blocks known phishing domains. Stay vigilant against unsolicited communications referencing crypto wallets or transactions.