ledge-live-web[.]pages[.]dev

This domain impersonates Ledger, a well-known cryptocurrency hardware wallet provider, to deceive users into interacting with a fraudulent wallet interface. The site displays a page titled 'Ledger live (formerly Ledger Live): The all-in-one crypto wallet …,' mimicking the legitimate Ledger Live application. Victims may be tricked into entering recovery phrases, private keys, or transferring funds to attacker-controlled addresses, leading to irreversible crypto asset theft. Analysis indicates the domain is actively malicious, with 7 out of 95 security vendors on VirusTotal flagging it as harmful. The domain was registered on April 27, 2026, through Cloudflare Pages, a platform often abused for rapid deployment of phishing infrastructure. It resolves to the IP address 172.66.47.177, hosted by Cloudflare in California. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of security while the site remains operational and unblocked by most security measures. If you visited ledge-live-web.pages.dev or entered any sensitive information, immediately disconnect the device from the internet and cease all interactions with the site. Transfer remaining crypto assets to a new, secure wallet using a trusted device. Reset any passwords or recovery phrases associated with the compromised account. Monitor all linked accounts for unauthorized transactions and report the incident to the legitimate Ledger support team for further guidance. Avoid reusing credentials across platforms to prevent additional exposure.