en-ladger-lve[.]pages[.]dev

PhishDestroy identifies en-ladger-lve.pages.dev as an active domain under investigation for credential theft targeting Ledger users. The risk level remains under investigation, but it is categorized as a generic phishing threat aiming to harvest sensitive login details.

en-ladger-lve.pages.dev currently has 11 out of 95 detections on VirusTotal, indicating it has not yet been flagged by major antivirus vendors. The domain is registered through Cloudflare, Inc., secured with an SSL certificate issued by Google Trust Services, and resolves to IP address 172.66.44.231. Although no blocklist detections or trust score reports are available, the domain’s use of Cloudflare and Google certificates suggests it is leveraging reputable infrastructure to appear legitimate.

To mitigate credential theft risks from this domain, users should avoid entering personal or Ledger wallet credentials on any pages hosted under en-ladger-lve.pages.dev. Organizations should block this domain at the network level and educate employees about recognizing fake Ledger sites. Continuous monitoring for updated threat intelligence on this domain is recommended, as it may soon be detected by security solutions given its active status.