ledzre-live[.]pages[.]dev

This domain is flagged as an elevated-risk brand impersonation threat targeting Ledger, a hardware wallet provider. The site mimics Ledger Live, the official wallet management application, to deceive users into disclosing sensitive credentials or installing malicious software. Analysis indicates the intent is likely credential harvesting or crypto asset theft, given the targeted impersonation of cryptocurrency infrastructure. Infrastructure analysis reveals the domain ledzre-live.pages.dev resolves to IP address 188.114.97.3 and was registered through Cloudflare, Inc. on March 23, 2026. Security vendors on VirusTotal flagged the domain as malicious, with 13 out of 95 detections. The domain appears on one security blocklist and is blocked by PhishDestroy. Additional technical indicators include a Gridinsoft trust score of 0/100, an SSL certificate issued by Google Trust Services, and detected technologies such as HSTS, Cloudflare, and HTTP/3. The page title, "Ledger Live – Easy and Secure Wallet App for All Major Operating Systems," closely mirrors legitimate Ledger branding to enhance deception. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and associated IP (188.114.97.3) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to the domain. Users who may have interacted with the site should be instructed to reset credentials for Ledger-related accounts and review transaction histories for unauthorized activity. Security teams should monitor for similar domains registered through Cloudflare or resolving to the same IP range, as threat actors frequently reuse infrastructure. Additionally, verifying SSL certificates and page titles against known legitimate sources can help identify further impersonation attempts.