en-live-doc-ledgs[.]pages[.]dev

This domain, en-live-doc-ledgs.pages.dev, poses a high-risk threat through brand impersonation, specifically targeting the cryptocurrency wallet brand Ledger. The site mimics the official Ledger Live application page, which could deceive users into believing they are interacting with a legitimate service. This deception increases the likelihood of users providing sensitive information, such as login credentials or private keys, to threat actors.

Analysis indicates that the domain en-live-doc-ledgs.pages.dev was created on September 19, 2025, and is registered through Cloudflare, Inc. The site is currently active and resolves to the IP address 172.66.44.154, which is located in California, USA, and uses an SSL certificate issued by Google Trust Services. The domain appears on one security blocklist and is flagged by 15 out of 95 security vendors on VirusTotal. Additionally, Google Safe Browsing has identified this domain as a phishing site.

If a user has visited en-live-doc-ledgs.pages.dev, it is crucial to take immediate action to secure their accounts and data. The first step is to change any passwords or credentials that were entered on the site, particularly those associated with Ledger or other cryptocurrency wallets. Users should also monitor their accounts for any unauthorized transactions and report any suspicious activity to their wallet provider or financial institution. Installing a reputable security solution and enabling two-factor authentication (2FA) on all relevant accounts can further enhance protection against future threats.