lazdor-live[.]pages[.]dev

This domain, lazdor-live.pages.dev, is actively impersonating Ledger, a cryptocurrency wallet provider, as indicated by the page title 'Ledger Live — Ledger Live Crypto Wallet App' and the scam type classified as brand impersonation. Registered on April 24, 2026, through Cloudflare, the domain resolves to IP 172.66.44.203, hosted on Cloudflare infrastructure in Canada. The site employs HSTS and HTTP/3, with nameservers hal.ns.cloudflare.com and priscilla.ns.cloudflare.com, and presents a valid SSL certificate issued by Google Trust Services (WE1). As of July 12, 2026, the domain remains active, returning an HTTP 200 status, and appears on one security blocklist. Analysis of detection engines shows 3 of 94 vendors flagging the domain, though the specific nature of these detections is not detailed. The domain's Gridinsoft trust score is 0/100, reinforcing its high-risk classification. Defenders should treat this domain as a confirmed phishing resource targeting Ledger users, likely designed to harvest credentials or distribute malicious payloads. Immediate blocking at the DNS or proxy level is recommended, along with monitoring for related infrastructure (e.g., Cloudflare-hosted subdomains) that may emerge. No evidence of a phishing kit or additional payloads is currently available, so further analysis of the site's content or network traffic is advised to determine the exact attack vector.