my-ledgr-live-us[.]pages[.]dev

The domain my-ledgr-live-us.pages.dev was identified as a threat engaging in brand impersonation, specifically targeting the Ledger brand. This domain did not utilize a drainer kit but impersonated the official Ledger Live Crypto Wallet App to deceive users. The threat posed an elevated risk level due to its ability to mimic a trusted brand, potentially leading to unauthorized access to sensitive information and financial loss.

Analysis indicates that the domain has a VirusTotal detection score of 19/95, suggesting that a significant portion of security vendors recognize it as a threat. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, which is located in California, USA. The domain was created on March 22, 2026, and utilized an SSL certificate issued by Google Trust Services / WE1, enhancing its credibility to unsuspecting users. The domain appears on one known security blocklist and is currently blocked by PhishDestroy.

The domain is currently offline, indicating that it has been taken down. However, the infrastructure used, such as the registrar and IP address, remains a point of concern. The offline status reduces the immediate risk, but users should remain vigilant and avoid clicking links or entering credentials on any similar-looking domains. Security teams are advised to monitor for any reactivation of the domain or the use of related infrastructure to prevent further incidents.