live-ladger[.]pages[.]dev

This domain, live-ladger.pages.dev, is actively involved in brand impersonation, specifically targeting Ledger. The site presents itself under the guise of 'Ledger Live — Secure Crypto App,' a misleading tactic commonly associated with brand impersonation threats. No specific crypto drainer kit has been identified, but the domain's intent is to mislead users into believing they are accessing a legitimate Ledger service.

Technical analysis of the domain reveals several key indicators. The domain resolves to IP address 172.66.44.242, which is associated with Cloudflare, Inc. in Canada. VirusTotal reports that 2 out of 95 security vendors have flagged this domain as malicious. The domain was registered through Cloudflare, Inc. and created on April 14, 2026. An SSL certificate issued by Google Trust Services / WE1 is in use, which may lend false credibility to the site. Additionally, the domain is currently listed on one security blocklist and is blocked by the service PhishDestroy.

The current status of the domain is active, presenting ongoing risks to users who may be deceived by its appearance. Response measures include its inclusion on a security blocklist, but the risk remains high due to its active status. Users are advised to exercise caution and verify the legitimacy of any site that claims to represent Ledger, especially when dealing with sensitive information such as cryptocurrency transactions. Continuous monitoring and further dissemination of threat intelligence are recommended to mitigate this threat effectively.