ldgrer-lives[.]pages[.]dev

PhishDestroy identifies ldgrer-lives.pages.dev as an active brand impersonation domain falsely claiming affiliation with Ledger, a prominent hardware wallet provider. This domain is currently under investigation and has not yet been widely flagged by security vendors despite its malicious intent. The infrastructure leverages Cloudflare Pages to host deceptive content, exposing users to credential theft and financial compromise. This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating a low detection rate despite its clear intent to impersonate Ledger. Registered through Cloudflare, Inc., the domain resolves to IP address 188.114.96.3 and operates under a Google Trust Services SSL certificate, which may lend false legitimacy to unsuspecting users. The impersonation of Ledger, a trusted cryptocurrency security brand, heightens the risk of phishing success, particularly among cryptocurrency holders. Users should immediately avoid interacting with this domain and report it to their security teams or platforms like PhishDestroy. Given the low detection rate, organizations are advised to implement browser-based blocklists or DNS filtering to prevent access. If credentials were entered, users must revoke affected API keys, reset passwords, and monitor accounts for suspicious transactions. Proactive threat intelligence sharing is critical to prevent further exploitation while this domain remains active.