lodgor-live-us[.]pages[.]dev

The domain lodgor-live-us.pages.dev poses a specific brand impersonation threat, masquerading as a legitimate Ledger service to trick cryptocurrency users into revealing sensitive information or connecting their hardware wallets. This type of attack, known as crypto drainer or credential theft, aims to steal digital assets by deceiving victims into authorizing transactions or entering recovery phrases on a fake interface. The domain's page title, 'Suspected phishing site | Cloudflare,' indicates that Cloudflare's own systems flagged it as malicious, yet the site was briefly active before being taken offline.

Technical evidence underscores the risk: VirusTotal reports 2 out of 95 security vendors flagging this domain, confirming its malicious nature. The domain was created on March 27, 2026, through Cloudflare Pages, a service often abused for rapid deployment of phishing sites. It resolves to IP address 188.114.97.3 and appears on one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), lends a false sense of legitimacy, but the domain's short lifespan and quick takedown highlight its fraudulent intent.

Any user who visited lodgor-live-us.pages.dev should immediately disconnect their Ledger device from any computer or browser that accessed the site, revoke any permissions granted, and reset their recovery seed if it was entered. They should also run a security scan on their system and monitor their cryptocurrency wallets for unauthorized transactions. For additional safety, users should always verify URLs against official Ledger sources and enable two-factor authentication on all related accounts.