ledgre-liv-o[.]pages[.]dev

The domain ledgre-liv-o.pages.dev is currently active and poses a high-risk threat of brand impersonation, specifically targeting the brand Ledger. This domain appears to mimic the official Ledger® Live login page, potentially leading to unauthorized access to user credentials and sensitive information.

Infrastructure analysis reveals that this domain is registered through Cloudflare, Inc. and resolves to the IP address 188.114.96.3, which is located in California, USA. The domain was created on January 22, 2026, and is currently secured with an SSL certificate issued by Google Trust Services / WE1. This domain has been flagged by 3 out of 95 security vendors on VirusTotal, indicating a low but significant level of suspicion. Additionally, it appears on one security blocklist and is blocked by the PhishDestroy service.

The current status of the domain is active, and it remains a potential threat to users. It is recommended that Ledger users avoid interacting with this domain and report any suspicious activity to their security team. Network administrators should consider adding this domain to their blocklists to prevent access. Regular monitoring of the domain's activity and updates to security protocols can help mitigate the risk of credential theft and other malicious activities.