home-leder-live[.]pages[.]dev

The domain home-leder-live.pages.dev was registered on April 03, 2026 and is currently hosted behind Cloudflare infrastructure (nameservers ariadne.ns.cloudflare.com and norman.ns.cloudflare.com). DNS resolution points to IP address 188.114.97.3, which is associated with Cloudflare, Inc. in Canada. The site serves content over HTTPS using a Google Trust Services / WE1 certificate and returns HTTP status 200. The page title observed is "Ledger Live — Secure Access Guide & Step‑by‑Step Setup," indicating a brand‑impersonation campaign targeting Ledger users. Threat intelligence flags the domain as a brand‑impersonation type, and it is listed on one public blocklist (PhishDestroy). A Gridinsoft trust score of 0/100 further reflects a malicious assessment. VirusTotal analysis shows a single vendor detection out of 94 scans, confirming at least one security product identifies the domain as malicious. The combination of recent creation, Cloudflare hosting, valid TLS, and a misleading title suggests an attempt to lure Ledger customers to a fraudulent resource. Defenders should block the domain at network perimeter, update URL filtering policies, and monitor for related traffic to the 188.114.97.3 address. Analysts should continue to probe the site for credential‑stealing forms or additional indicators, and share any new findings with threat‑sharing communities.