auth-live-home[.]pages[.]dev

Auth-live-home.pages.dev is a confirmed phishing domain that impersonates the Ledger brand to steal cryptocurrency credentials. The site posed as the official Ledger Live platform with a convincing page title reading 'Ledger Live — Protect Crypto Portfolio & Wallet App | Official', indicating a sophisticated attempt to harvest login details and potentially deploy a crypto drainer. PhishDestroy categorizes this as a brand impersonation threat aimed at Ledger users, with an elevated risk level due to its convincing appearance.

Technical analysis reveals that the domain was registered on April 24, 2026, through Cloudflare, Inc., and resolves to IP address 172.66.47.2. The SSL certificate was issued by Google Trust Services (WE1), lending false legitimacy. VirusTotal data shows that 12 out of 95 security vendors flagged this domain as malicious, and it appears on one security blocklist. Notably, the domain was not blacklisted by Google Safe Browsing at the time of analysis, which increases the risk for unsuspecting users.

As of the latest scan, the domain is offline, meaning the phishing site is no longer accessible. However, the domain remains registered and could be reactivated. Users who may have visited the site while it was active should immediately change their Ledger Live credentials and enable two-factor authentication. PhishDestroy advises all users to always verify the official URL (ledger.com) before entering sensitive information and to use hardware wallets for maximum security.