live-lejderr[.]pages[.]dev

This domain, live-lejderr.pages.dev, is flagged as a brand impersonation threat targeting Ledger, a hardware cryptocurrency wallet provider. Analysis indicates the site mimics the official Ledger Live application interface, presenting itself as a platform for buying, selling, and tracking cryptocurrency securely. The page title, 'Ledger Live App | Buy, Sell & Track Crypto Safely,' is designed to deceive users into believing they are interacting with a legitimate service, increasing the likelihood of credential theft or unauthorized transactions. Infrastructure analysis reveals several technical indicators associated with this domain. It resolves to the IP address 188.114.96.3 and is registered through Cloudflare, Inc., with a creation date of April 11, 2026. The domain employs Google Trust Services for its SSL certificate and utilizes technologies such as HSTS, Cloudflare, and HTTP/3. Despite its malicious intent, the domain has not yet been flagged by VirusTotal, showing 0/95 detections. It appears on one security blocklist and has been assigned a trust score of 0/100 by Gridinsoft. The domain is currently blocked by PhishDestroy, indicating prior detection as a phishing threat. As of the latest assessment, live-lejderr.pages.dev has been taken offline, reducing immediate exposure to potential victims. However, the domain's infrastructure remains a latent risk, as threat actors may reactivate or replicate it under a different name. Users who may have interacted with this site are advised to revoke any connected wallet permissions, monitor for unauthorized transactions, and verify the authenticity of any Ledger-related communications. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.