eng-home-ledgr[.]netlify[.]app

The domain eng-home-ledgr.netlify.app was registered on July 02, 2026 through the Netlify platform and is currently active. Infrastructure analysis shows the hostname resolves to IP 63.176.8.218, which is assigned to Amazon.com, Inc. in Germany (AS16509). The site is served over HTTPS using a DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate and enforces HSTS, indicating a deliberately configured web server. Netlify is detected as the hosting technology, and the HTTP response code is 200, confirming that the page is reachable. The page title reported by the scanner reads "Ledger Live Login — How to Access Your Wallet Safely," directly targeting Ledger users and matching the declared brand impersonation and credential phishing classification. The domain appears on one security blocklist and is specifically blocked by PhishDestroy; its Gridinsoft trust score is 0 out of 100. VirusTotal analysis recorded 19 of 91 security vendors flagging the domain as malicious, reinforcing the high‑risk assessment. While the exact content of the landing page has not been examined, the combination of brand‑specific title, credential‑theft intent, and active hosting suggests a concerted attempt to harvest Ledger account credentials. Defenders should immediately block the domain at perimeter and DNS layers, monitor for related indicators of compromise, and educate users about the fraudulent nature of the site. Ongoing observation of any additional hosting changes or new detection signatures is recommended to maintain situational awareness.