uts-ledger-live[.]pages[.]dev

This domain, uts-ledger-live.pages.dev, is actively impersonating Ledger, a hardware cryptocurrency wallet provider. Analysis indicates the site presents itself as 'Ledger Live: The All-in-One Secure Digital Asset Management Hub,' directly targeting users of Ledger’s official software. The domain was registered on April 2, 2026, through Cloudflare and resolves to the IP address 188.114.97.3. It holds a Gridinsoft trust score of 0/100 and is flagged by one security vendor on VirusTotal, with one detection out of 95 scans. The domain appears on at least one security blocklist and is currently blocked by PhishDestroy. Infrastructure analysis reveals the domain uses a Google Trust Services SSL certificate, which does not inherently indicate legitimacy due to its widespread availability. The use of Cloudflare’s Pages platform suggests an attempt to leverage reputable hosting services to evade detection. While the exact content and functionality of the site remain unanalyzed, the combination of brand impersonation, low trust scores, and active blocklist presence confirms its classification as a high-risk phishing domain. Defenders should treat this domain as malicious and prioritize blocking it at the network level. Users encountering this domain should avoid interaction, particularly any requests for wallet credentials or recovery phrases. Further investigation into associated infrastructure, such as IP reputation and hosting patterns, is recommended to identify related threats.