live-doc-ledgre[.]pages[.]dev

The domain live-doc-ledgre.pages.dev has been identified as a brand impersonation threat, specifically targeting the cryptocurrency wallet brand Ledger. The domain was created on April 12, 2026, and the page title 'Ledger Live App – Secure & Crypto' suggests an attempt to pose as the official Ledger Live application, which is used for securely managing cryptocurrency.

Analysis of technical indicators reveals that the domain has been flagged by 12 out of 95 security vendors on VirusTotal. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. It was created on April 12, 2026, and employs HSTS (HTTP Strict Transport Security) and HTTP/3 protocols. The SSL certificate is issued by Google Trust Services. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, indicating a significant lack of trustworthiness.

The domain is currently offline, and it has been taken down as part of a coordinated response to mitigate the risk posed by the brand impersonation attempt. Despite the domain being offline, there remains a risk that users who have already interacted with it may have had their credentials compromised. Security teams are advised to monitor for any signs of misuse or unauthorized access and to educate users about the importance of verifying the authenticity of websites, especially those related to sensitive financial applications.