en-live-doc-ledgr-fed[.]pages[.]dev

This domain, en-live-doc-ledgr-fed.pages.dev, presents a high-risk brand impersonation threat targeting cryptocurrency users by mimicking the official Ledger Live desktop application interface. Analysis indicates the page title explicitly replicates the legitimate software's branding - "Ledger Live Desktop® | Safe & Easy Crypto Management" - suggesting an intent to deceive users into entering sensitive wallet credentials or downloading malicious payloads. The domain's infrastructure is designed to exploit trust in the Ledger brand, potentially facilitating unauthorized access to cryptocurrency holdings or the installation of malware on victim devices. Infrastructure analysis reveals several technical indicators supporting the malicious classification. The domain was registered through Cloudflare, Inc. on April 08, 2026, with an anomalous future creation date that may indicate registry manipulation. It resolves to the IP address 188.114.96.3 and uses SSL certificates issued by Google Trust Services, providing a false sense of security. Detection metrics show 0 detections across 95 VirusTotal engines, though it appears on 1 security blocklist, and maintains a Gridinsoft trust score of 0/100. The domain's current offline status follows its identification and blocking by security systems. Users who accessed en-live-doc-ledgr-fed.pages.dev should immediately revoke any entered credentials and assume their cryptocurrency wallet information may be compromised. It is recommended to perform a full system scan for malware, monitor all linked accounts for unauthorized transactions, and consider migrating funds to new wallet addresses if any interaction with the domain occurred. The anomalous 2026 registration date suggests potential domain spoofing techniques, warranting heightened vigilance for similar impersonation attempts. Organizations should update their security blocklists to include this domain and its associated IP address 188.114.96.3 as malicious indicators.