ledgar-lives[.]pages[.]dev

This domain is assessed as a high-risk brand impersonation site targeting users of a crypto asset management platform. The page is designed to mimic official login and dashboard interfaces in order to harvest authentication credentials, recovery phrases, and session tokens. The infrastructure indicates a newly created malicious asset with fast deployment, consistent with phishing campaigns aimed at financial account takeover.

Technical telemetry shows multiple risk indicators. The domain was created on April 30, 2026 and is currently active. It is hosted behind Cloudflare infrastructure (IP: 188.114.97.3) with SSL issued by Google Trust Services (WE1). The domain appears on 1 security blocklist and is flagged by 10/95 VirusTotal security vendors, indicating moderate-to-high consensus detection. Registration is associated with Cloudflare, Inc., suggesting use of privacy-protected or proxy registration services to obscure origin.

If a user has visited this domain, immediate containment actions are recommended. Do not enter any credentials, seed phrases, or recovery information. If credentials were submitted, assume compromise and migrate digital assets to a new secure wallet environment. Revoke all active sessions and API permissions associated with the affected account. Perform a full malware scan on all devices used to access the site, as credential stealers may be deployed. Users should only access services through verified official channels and bookmark legitimate domains to prevent typosquatting exposure. Incident should be reported to relevant security blocklists and monitored for further infrastructure reuse or domain rotation.