support-ledgr-access[.]pages[.]dev

This domain presents a high-risk brand impersonation threat targeting Ledger cryptocurrency wallet users. The fraudulent site mimics the official Ledger login interface, specifically the page titled 'Ledger Login – Connect Your Device and Access Ledger Live,' designed to harvest user credentials and private keys. Analysis indicates the site employs convincing visual elements and a deceptive URL structure to trick victims into entering sensitive information, which could lead to unauthorized access to crypto assets and financial loss. Infrastructure analysis reveals concrete indicators of malicious intent. The domain support-ledgr-access.pages.dev was registered on April 3, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.44.127, located in California. Security vendors have flagged the domain, with VirusTotal reporting 5 out of 95 engines detecting it as malicious. Additionally, the domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services, a common characteristic of both legitimate and fraudulent sites leveraging Cloudflare infrastructure. Users who have visited support-ledgr-access.pages.dev or entered credentials on the site should take immediate action to mitigate risks. First, revoke any active sessions and change passwords for Ledger Live and associated crypto accounts. Enable multi-factor authentication where available and monitor accounts for unauthorized transactions. If private keys or recovery phrases were entered, transfer assets to a new wallet immediately. Report the incident to the legitimate Ledger support team and consider filing a complaint with relevant cybersecurity authorities. Always verify domain authenticity by checking official sources before entering sensitive information.