doc-ledger-lives[.]pages[.]dev

This domain, doc-ledger-lives.pages.dev, is actively engaged in brand impersonation, specifically targeting the well-known cryptocurrency wallet service, Ledger. The domain is designed to deceive users into believing they are interacting with the official Ledger Live Wallet, potentially leading to the compromise of sensitive information such as login credentials and private keys.

Analysis indicates that the domain has been flagged by 6 out of 95 security vendors on VirusTotal, suggesting a moderate level of recognition among security tools. The domain is registered through Cloudflare, Inc., and was created on April 28, 2026. It currently resolves to the IP address 188.114.97.3, which is located in Canada and is associated with CloudFlare, Inc. Additionally, the domain appears on one security blocklist, further corroborating its malicious nature. The SSL certificate is issued by Google Trust Services / WE1, which may contribute to user trust and lower their guard against potential threats.

If users have visited this domain, they should immediately change their Ledger Live Wallet passwords and any associated accounts. It is recommended to monitor account activity for any unauthorized transactions and to report the incident to Ledger's official support channels. Users should also consider running a comprehensive security scan on their devices to detect and remove any potential malware that may have been installed during the visit.