ldgrr-live-apps[.]pages[.]dev

The domain ldgrr-live-apps.pages.dev is flagged as a high‑risk, active brand‑impersonation campaign targeting Ledger. The site presents the page title “Complete Guide to Ledger Live App | Setup, Features & Security,” which directly references the Ledger brand and suggests a malicious attempt to lure users seeking legitimate Ledger information. Infrastructure analysis shows the domain was registered on April 05 2026 through Cloudflare, Inc., and resolves to the Cloudflare IP address 172.66.44.249, located in Canada. The DNS configuration uses Cloudflare nameservers (guss.ns.cloudflare.com and rosemary.ns.cloudflare.com), and the SSL certificate is issued by Google Trust Services (WE1), indicating standard TLS termination via Cloudflare. The site returns HTTP 200, confirming a reachable web service. Reputation data reveals a Gridinsoft trust score of 0 / 100, placement on a single security blocklist, and active blocking by PhishDestroy. VirusTotal scans indicate that five of ninety‑four security vendors have flagged the domain, reinforcing the suspicion of malicious activity. No additional intelligence about the page content, scripts, or credential‑harvesting mechanisms is currently available. Defenders should prioritize immediate blocking of the domain at perimeter and endpoint layers, update URL filtering rules to include the full hostname, and monitor for any related traffic to Cloudflare‑hosted IPs associated with this campaign. Continuous re‑evaluation is advised as further analysis or additional detections become available.