lern-leddgr-live[.]pages[.]dev

The domain lern-leddgr-live.pages.dev was registered on April 05, 2026 through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, which is located in Canada and is owned by Cloudflare. The authoritative nameservers are elaine.ns.cloudflare.com and fattouche.ns.cloudflare.com. The site serves content over HTTPS using a Google Trust Services / WE1 certificate and returns HTTP status 200. The page title observed is "Ledger® Live — Login & Getting Started (Presentation)", indicating a brand impersonation of Ledger. Analysis of the infrastructure links the domain to a Seed Phrase Phishing kit, classifying the activity as credential phishing targeting Ledger users. The domain is currently active, flagged as high risk, and has been blocked by PhishDestroy. It appears on one security blocklist and received detections from seven of ninety‑four VirusTotal scanners. The Gridinsoft trust score is 0 out of 100, reflecting a malicious assessment. While the page content has not been directly examined, the combination of the brand‑specific title, phishing kit attribution, and multiple security detections strongly suggests a credential‑stealing operation. Defenders should block the domain and associated IP, monitor DNS queries for the listed Cloudflare nameservers, and update detection rules to capture traffic to the SSL certificate issuer and the observed page title. Continuous monitoring of Cloudflare‑hosted infrastructure is advised, as the attacker may rapidly redeploy similar domains using the same service provider.