liveledger-login-3te[.]pages[.]dev

This domain, liveledger-login-3te.pages.dev, is identified as a brand impersonation phishing site specifically targeting Ledger, a cryptocurrency hardware wallet provider. Analysis indicates the domain was designed to harvest user credentials by mimicking Ledger's official login interface, a common tactic in cryptocurrency-related phishing campaigns. No specific drainer kit signatures were detected in initial scans, though further forensic analysis of the page source may reveal obfuscated JavaScript or other credential theft mechanisms. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on February 21, 2026, and resolves to the IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider often abused by threat actors to lend credibility to phishing sites. At the time of detection, the domain was flagged by 12 out of 95 security vendors on VirusTotal, and appeared on one security blocklist. Google Safe Browsing (GSB) had not yet listed the domain at the time of initial analysis, though this may have changed post-takedown. The domain has since been taken offline, likely following abuse reports or automated detection by the hosting provider. The page title, 'Suspected phishing site | Cloudflare,' suggests the hosting infrastructure flagged the content prior to removal. Despite its current offline status, residual risk remains for users who may have interacted with the domain during its active window. Organizations are advised to monitor for indicators of compromise (IoCs) such as the domain, IP, and SSL certificate fingerprint in network logs. Users who entered credentials on this site should immediately rotate passwords and enable multi-factor authentication on all cryptocurrency-related accounts. Proactive monitoring of newly registered domains with similar naming patterns (e.g., 'liveledger,' 'login-3te') is recommended to detect potential follow-up campaigns.