ladgr-lived-app[.]pages[.]dev

PhishDestroy identifies ladgr-lived-app.pages.dev as an active brand impersonation domain targeting Ledger users, currently under investigation as a potential crypto drainer. This domain is designed to deceive visitors by mimicking Ledger’s official branding and services, likely aiming to trick users into connecting compromised cryptocurrency wallets or revealing sensitive credentials. The threat is classified as active due to its ongoing use and the absence of broad detection coverage. This domain resolves to IP address 172.66.44.84 and is registered through Cloudflare, Inc. with Google Trust Services providing the SSL certificate. As of the latest scan, it remains unflagged by any of the 95 VirusTotal vendors and has not been added to major threat intelligence blocklists. No historical data points such as creation date or additional blocklist counts are available for deeper correlation, leaving users and security teams with limited proactive indicators at this time. The current status of ladgr-lived-app.pages.dev is under investigation, meaning its full operational scope and malicious infrastructure are not yet fully mapped. Users are strongly advised to avoid interacting with this domain and report any observed activity to their security teams or through threat intelligence platforms. Organizations should consider blocking this domain at the network perimeter and monitoring for any associated indicators of compromise (IOCs) in their environments. Exercise heightened caution when accessing cryptocurrency-related services and verify legitimate domains directly through official channels.