ldeger-lived[.]pages[.]dev

The domain ldeger-lived.pages.dev has been identified as a phishing site specifically targeting users of Ledger, a hardware cryptocurrency wallet provider. Analysis indicates this domain was designed for brand impersonation, likely to harvest sensitive credentials such as recovery phrases, private keys, or login details under the guise of legitimate Ledger services. As of the latest verification, the domain has been taken offline, though prior activity suggests it was operational for malicious purposes. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 03, 2026, and resolved to the IP address 188.114.96.3. It holds a Gridinsoft trust score of 0/100, indicating high risk, and appears on one security blocklist. VirusTotal detections show 0/95 vendors flagged the domain at the time of assessment, though this may reflect its recent creation or evasion techniques. The SSL certificate is issued by Google Trust Services, a common feature in both legitimate and malicious sites to avoid immediate suspicion. The page title, 'Suspected phishing site | Cloudflare,' suggests it was flagged by automated systems prior to takedown. Current status confirms the domain is offline, reducing immediate risk to end users. However, the infrastructure and registration details indicate potential for reuse or rebranding under a similar scheme. Organizations and individuals are advised to monitor for newly registered domains mimicking Ledger or other cryptocurrency services, particularly those using Cloudflare hosting or similar CDN providers. Network defenders should update blocklists to include this domain and its associated IP, while users should verify all communications and websites against official Ledger channels. Cryptocurrency holders are reminded to never enter recovery phrases or private keys into any website, regardless of apparent legitimacy.