live-ldger-usa-io[.]pages[.]dev

This domain poses a direct threat as a brand impersonation scam targeting Ledger cryptocurrency wallet users. The site mimics the official Ledger Live interface, presenting itself with the page title 'Ledger® Live:** | Secure Crypto Management' to deceive victims into entering sensitive wallet credentials or recovery phrases. Such attacks typically lead to unauthorized access and immediate theft of cryptocurrency assets, often resulting in irreversible financial losses due to the nature of blockchain transactions. Analysis indicates the domain live-ldger-usa-io.pages.dev was registered on March 29, 2026, through Cloudflare, Inc., and currently resolves to the IP address 172.66.47.65. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to appear legitimate. The domain is flagged by 5 out of 95 security vendors on VirusTotal, and it appears on one security blocklist. Despite these indicators, the site remains active, increasing the risk of exposure to unsuspecting users. Users who have visited live-ldger-usa-io.pages.dev or interacted with its content should immediately cease all activity and assume their credentials or recovery phrases have been compromised. Disconnect any connected wallets from the site and revoke permissions via the official Ledger Live application. Monitor all associated wallet addresses for unauthorized transactions and consider transferring assets to a new, secure wallet. Report the domain to relevant security teams and blocklists to prevent further exploitation.