live-ldgerr-support[.]pages[.]dev

This domain, live-ldgerr-support.pages.dev, is flagged as a high-risk brand impersonation threat targeting Ledger, a cryptocurrency hardware wallet provider. Analysis indicates the domain replicates the Ledger Live application interface, likely designed to harvest credentials or private keys from unsuspecting users. The page title explicitly mimics the legitimate application, using the phrase *Ledger Live* | Secure Crypto Management Application, a clear indicator of intent to deceive users into believing the site is authentic. Infrastructure analysis reveals the domain was registered on October 02, 2025, through Cloudflare, Inc., and resolves to the IP address 188.114.96.3, hosted on Cloudflare’s network (AS13335). VirusTotal detection shows 15 out of 95 security vendors have flagged this domain as malicious. The domain appears on one security blocklist and remains unlisted by Google Safe Browsing (GSB) at the time of analysis. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend an appearance of legitimacy to phishing sites. As of the latest assessment, live-ldgerr-support.pages.dev remains active and unmitigated, posing a continued risk to users. Response actions should include immediate blocking of the domain and IP at the network level, as well as monitoring for related infrastructure (e.g., subdomains or newly registered lookalike domains). Users are advised to verify the authenticity of Ledger-related communications by cross-referencing official channels and avoiding interaction with unsolicited links. The remaining risk is classified as high due to the domain’s active status and the potential for credential or asset compromise.