ledger-livvee-app[.]pages[.]dev

Analysis indicates that ledger-livvee-app.pages.dev resolves to the IP address 188.114.97.3 and is served through Cloudflare’s infrastructure, as evidenced by the authoritative nameservers carter.ns.cloudflare.com and liv.ns.cloudflare.com and a registrar record showing Cloudflare, Inc. as the sponsoring organization. The domain is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, suggesting that at least one reputable anti‑phishing service has identified it as malicious. VirusTotal reports indicate that the domain was scanned by 91 antivirus and URL‑reputation engines, none of which raised a detection; this absence of alerts should not be interpreted as confirmation of safety, but rather as a lack of current signatures for this particular threat.

The available intelligence classifies the activity as a “crypto drainer,” implying that the site is likely designed to solicit cryptocurrency transactions from victims and redirect funds to attacker‑controlled wallets. No public information on SSL/TLS certificate details, HTTP response codes, Safe Browsing status, OTX tags, trust scores, page title, or additional evidence links is present, leaving those aspects of the host’s behavior unverified at this time.

Defenders should treat the domain as hostile: block DNS resolution for ledger‑livvee‑app.pages.dev, add the associated IP 188.114.97.3 to network‑level deny lists, and incorporate the domain into existing phishing and crypto‑fraud detection rules. Continuous monitoring of outbound traffic to the IP and periodic re‑scanning with updated threat‑intel platforms are recommended to capture any changes in detection status or infrastructure modifications.