learn-ledger-liv-app[.]pages[.]dev

The domain learn-ledger-liv-app.pages.dev is currently active and was registered on May 01, 2026 through Cloudflare, Inc. DNS resolution points to IP address 172.66.47.95, which is hosted by Cloudflare in Canada. The domain uses the nameservers evan.ns.cloudflare.com and indie.ns.cloudflare.com, and presents a TLS certificate issued by Google Trust Services under the WE1 label, indicating a valid HTTPS endpoint. HTTP requests return a 200 status code and the page title is "Ledger Live App – Manage, Send, and Receive Crypto Safely," directly referencing the Ledger brand. Threat intelligence classifies the site as a brand impersonation campaign targeting Ledger users. Infrastructure analysis shows the presence of HSTS, Cloudflare edge services, and HTTP/3 support, reflecting a modern hosting configuration often leveraged to increase credibility. The domain appears on a single security blocklist and is flagged by PhishDestroy. VirusTotal analysis reports 12 of 91 security vendors flagging the domain, reinforcing the malicious assessment. Gridinsoft assigns a trust score of 0/100, indicating a high confidence of malicious intent. No additional content analysis is available beyond the page title; therefore the specific payload or credential‑harvesting mechanisms remain unknown. Defenders should prioritize blocking the domain at network perimeter and DNS filtering layers, monitor for related indicators of compromise, and update detection rules to include the observed IP address and nameserver pair. Continuous observation is recommended to capture any evolution of the site’s content or additional infrastructure changes.