live-us-ledgre-eng[.]pages[.]dev

This domain, live-us-ledgre-eng.pages.dev, operates as a credential phishing site specifically targeting users of Ledger hardware wallets. The page mimics the official Ledger Live login interface, presenting itself as 'Ledger Live Login® | Ledger Suite App (Official) | Ledger®' to deceive victims into entering sensitive wallet credentials, recovery phrases, or private keys. Given the high-value nature of cryptocurrency assets, such attacks pose severe financial risks, including unauthorized access and irreversible fund transfers. Analysis indicates the domain was registered through Cloudflare, Inc., with a creation date of April 22, 2026, suggesting an attempt to exploit future-dated legitimacy. The domain resolves to the IP address 172.66.44.177 and employs technologies such as HSTS, Cloudflare infrastructure, and HTTP/3, alongside an SSL certificate issued by Google Trust Services. Despite these technical measures, the site remains undetected by 95/95 security engines on VirusTotal, though it appears on one security blocklist. The Gridinsoft trust score of 0/100 further corroborates its malicious intent. Users who visited live-us-ledgre-eng.pages.dev and entered credentials or recovery phrases should immediately transfer any remaining assets to a new, secure wallet. Affected individuals must revoke all connected sessions, reset associated passwords, and enable multi-factor authentication where available. Monitoring for unauthorized transactions is critical, and victims should report the incident to relevant financial or cybersecurity authorities for further mitigation. Given the domain's current offline status, continued vigilance against similar impersonation attempts is strongly advised.