en-live-doc-ledgr[.]pages[.]dev

The domain en-live-doc-ledgr.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) in the United States. The site presents a Cloudflare‑issued SSL certificate signed by Google Trust Services under the WE1 profile, and the HTTP response returns a 403 status code, indicating that the content is currently inaccessible. Infrastructure analysis shows the presence of HTTP/3 and HSTS, confirming modern web protocol support. According to multiple intelligence sources the domain is classified as a crypto‑related brand impersonation targeting Ledger, and the page title returned by Cloudflare reads "Suspected phishing site | Cloudflare".

Reputation metrics are extremely low, with a Scamadviser trust score of 1 out of 100 and a Gridinsoft score of 0 out of 100. VirusTotal reports 14 detections out of 93 scanning engines, and the domain appears on at least one security blocklist, having been blocked by PhishDestroy. The nameservers listed are miles.ns.cloudflare.com and rachel.ns.cloudflare.com, both standard Cloudflare resolvers.

While the site is currently offline, the combination of low trust scores, multiple vendor detections, and confirmed impersonation of the Ledger brand warrants continued monitoring. Defenders should ensure that any outbound traffic to this host is denied, update web filtering rules to include the domain and its IP range, and share the indicator with threat‑intelligence feeds. Ongoing observation is recommended to detect any future re‑activation or related infrastructure changes.