ledger-live-log-support[.]pages[.]dev

This domain presents itself as a legitimate wallet management interface but operates as a brand impersonation threat designed to harvest credentials from cryptocurrency wallet users. The site mimics the appearance and functionality of official wallet software, specifically targeting individuals attempting to access or manage their digital assets. Visitors may encounter login prompts or download requests that appear authentic but are engineered to capture sensitive information such as recovery phrases, private keys, or account credentials. Analysis indicates the domain was registered on September 25, 2025, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. Security vendor scans on VirusTotal show 2 out of 95 detection engines flagging the domain as malicious, while it also appears on one security blocklist. The SSL certificate is issued by Google Trust Services under the WE1 root, which, while valid, does not guarantee the legitimacy of the site’s content or intent. The page title, '🔒 Ledger Live – Secure Wallet App for Windows, Mac,' closely mirrors official branding to increase credibility. If this domain was visited, immediate action should be taken to secure potentially exposed assets. Users should revoke any active sessions, change passwords for associated accounts, and consider migrating funds to a new wallet if recovery phrases or private keys were entered. Monitoring for unauthorized transactions is critical, and affected individuals should report the incident to relevant security teams or abuse contacts. No further interaction with the domain should occur, and any downloaded files should be treated as compromised and deleted without execution.