eng-ladgeir[.]pages[.]dev

This domain, eng-ladgeir.pages.dev, is actively engaged in brand impersonation targeting Ledger, a well-known cryptocurrency wallet provider. The site presents itself as the official Ledger Live platform, using the page title 'Ledger Live (Official) — Secure Bitcoin & Crypto Wallet' to deceive users into entering sensitive credentials or wallet recovery phrases. Given the high-value nature of cryptocurrency assets, this impersonation poses a severe risk of financial theft, including potential crypto draining attacks where funds are irreversibly transferred to attacker-controlled wallets. Analysis indicates the domain is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services (WE1). The domain resolves to the IP address 188.114.96.3, located in Canada, and was created on April 04, 2026. Detection metrics reveal that 14 out of 95 security vendors on VirusTotal have flagged this domain as malicious. Additionally, the domain appears on one security blocklist and is currently blocked by PhishDestroy, though it remains active as of this report. Users who have interacted with eng-ladgeir.pages.dev should immediately cease all engagement and disconnect any connected wallets or devices. Any credentials, recovery phrases, or private keys entered on this site must be considered compromised. Affected individuals should transfer remaining assets to a new, secure wallet using an unaffected device and monitor all linked accounts for unauthorized transactions. It is also recommended to report the incident to relevant financial and cybersecurity authorities to aid in tracking and mitigating further threats.