ledzor-io-live[.]pages[.]dev

This domain was registered on April 03, 2026 through Cloudflare, Inc. and resolves to 172.66.47.101, a Cloudflare edge node located in Canada. The authoritative name servers are ishaan.ns.cloudflare.com and lola.ns.cloudflare.com. The site returns HTTP 200 responses and presents an SSL certificate issued by Google Trust Services / WE1, confirming a valid TLS handshake. The page title returned is “Ledger Live® | Secure Crypto Wallet & Portfolio Manager”, matching the brand target Ledger and indicating a brand‑impersonation tactic. Gridinsoft assigns a trust score of 0/100, and VirusTotal reports a single vendor detection out of 94 scanners. The domain is currently listed on one public blocklist and has been blocked by the PhishDestroy service. The infrastructure follows a pattern common to short‑lived phishing campaigns that use Cloudflare’s free DNS and CDN to obscure the origin server. No additional payload, script, or redirect information is publicly available, and the landing‑page content has not been captured. Defenders should add the domain to block lists, monitor DNS queries for the associated IP and name servers, and enforce strict verification of any Ledger‑related communications. Continuous observation is advised to detect possible evolution of the campaign or emergence of related domains.