new-l-ivqe-ledgw[.]pages[.]dev

The domain new-l-ivqe-ledgw.pages.dev is a phishing site that impersonates the brand Ledger, posing a specific threat of brand impersonation. It is designed to deceive users into believing it is the legitimate Ledger Live website, which could lead to the theft of cryptocurrency. The site is currently taken offline, but users who may have visited it should remain vigilant about their security.

The domain new-l-ivqe-ledgw.pages.dev was created on September 04, 2025, and is registered through Cloudflare, Inc. It resolves to the IP address 188.114.97.3, which is located in CA (CloudFlare, Inc.). The SSL certificate is issued by Google Trust Services / WE1. According to VirusTotal, 1 of 95 security vendors flagged this domain, and it appears on 1 security blocklist, specifically PhishDestroy. The page title observed was 'Ledger Live | Secure Crypto Wallet', further indicating its intent to impersonate the legitimate Ledger website.

If users have visited new-l-ivqe-ledgw.pages.dev, they should immediately check their Ledger accounts for any unauthorized activity. For cryptocurrency drainer scams, users should revoke any token approvals and move their funds to a new, secure wallet. For credential or login phishing, users should change their passwords, enable two-factor authentication, and monitor their accounts for any signs of fraud. Additionally, users can report this phishing site to PhishDestroy and other relevant security organizations to help protect others from falling victim to similar scams.