ldger-live-intro[.]pages[.]dev

ldger-live-intro.pages.dev is currently identified as an active credential theft threat domain. The specific threat involves attempts to harvest user credentials, with investigations ongoing to determine the full scope and impact of the campaign. No specific brand impersonation has been confirmed at this time, but the domain’s activity is consistent with common credential phishing tactics.

Technical analysis reveals that ldger-live-intro.pages.dev is registered through Cloudflare, Inc. and resolves to the IP address 188.114.96.3. Despite being active, this domain has not been flagged by any of the 95 VirusTotal antivirus and security vendors scanned, showing 0 detections. The domain uses an SSL certificate issued by Google Trust Services, which may lend it an appearance of legitimacy to potential victims. There is currently no indication of the domain’s creation date or blocklist status from the provided data.

Due to the domain’s active status and its association with credential theft, it is recommended that users avoid interacting with it entirely. Organizations should monitor for any phishing emails or communications referencing this domain and block network access to the IP 188.114.96.3 where possible. Continuous monitoring and further investigation are advised to track any changes in detection rates or additional intelligence that could clarify the threat actor’s objectives and methods.