ledgr-live-x-eng[.]pages[.]dev

This domain, ledgr-live-x-eng.pages.dev, poses a high-risk brand impersonation threat designed to deceive users of Ledger, a cryptocurrency hardware wallet provider. The site mimics the official Ledger Live interface, presenting itself as a legitimate platform for secure cryptocurrency management. Analysis indicates the domain is engineered to deploy crypto drainer malware, which automatically siphons digital assets from connected wallets by exploiting user trust in the impersonated brand. The page title, 'Ledger Live | Secure Cryptocurrency Management,' reinforces the deception, increasing the likelihood of successful credential theft or unauthorized transactions. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 27, 2026, though this date may reflect a placeholder or falsified record. It resolves to the IP address 188.114.97.3, hosted under Cloudflare, Inc. in Canada. The domain appears on one security blocklist and is flagged by 11 out of 95 security vendors on VirusTotal, with detections including classifications such as phishing, brand impersonation, and malicious web content. The SSL certificate, issued by Google Trust Services (WE1), further obscures the domain's illegitimacy by providing an appearance of security. Users who have interacted with ledgr-live-x-eng.pages.dev should immediately disconnect any connected wallets and cease all further engagement. Affected individuals must revoke any wallet permissions granted to the domain and transfer remaining assets to a new, secure wallet address. It is critical to monitor transaction histories for unauthorized activity and report the incident to relevant security teams or blockchain analysis platforms. Given the domain's active status and high-risk classification, users are advised to verify all future Ledger-related communications through official channels only.