apps-ldgr-en[.]pages[.]dev

This domain, apps-ldgr-en.pages.dev, is actively engaged in brand impersonation targeting Ledger, a well-known cryptocurrency hardware wallet provider. The site presents a fraudulent interface titled 'Ledger Live Wallet - Secure & Easy Crypto Management,' designed to deceive users into entering sensitive credentials or private keys. Given the high-value nature of cryptocurrency assets, this impersonation poses a severe risk of financial theft, including potential crypto drainer attacks where funds are irreversibly transferred to attacker-controlled wallets. Analysis indicates the domain was registered through Cloudflare Pages on April 24, 2026, and currently resolves to the IP address 188.114.97.3, hosted under Cloudflare, Inc. in Canada. The SSL certificate is issued by Google Trust Services (WE1), a common feature in legitimate and malicious sites alike. Detection metrics reveal the domain is flagged by 3 out of 95 security vendors on VirusTotal, while only one security blocklist, PhishDestroy, currently lists it as malicious. The discrepancy between vendor detections and blocklist presence suggests the campaign may still be in an early or evasive phase. Users who have visited apps-ldgr-en.pages.dev or interacted with its content should immediately revoke any connected wallet permissions and cease all further engagement. If credentials or private keys were entered, affected parties must transfer remaining assets to a new, secure wallet and monitor transaction histories for unauthorized activity. Given the domain's continued activity, security teams are advised to update detection rules to include this indicator of compromise, particularly for environments where cryptocurrency management tools are in use.