leddger-live[.]pages[.]dev

Analysis of the domain leddger-live.pages.dev indicates active brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. The domain was registered on September 18, 2025, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3, hosted under Cloudflare's infrastructure in Canada. The page title, 'Ledger Live Download — Ultimate Cryptocurrency Wallet,' directly mimics official Ledger branding, suggesting an intent to deceive users into downloading malicious software or disclosing sensitive credentials. Infrastructure analysis reveals the use of Cloudflare nameservers (cruz.ns.cloudflare.com and doug.ns.cloudflare.com) and technologies such as HSTS and HTTP/3. The domain holds a Gridinsoft trust score of 0/100, and 12 of 91 security vendors on VirusTotal flagged it as malicious. It appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is classified as WE1, a low-trust indicator often associated with automated or suspicious issuance. While the domain's content has not been fully analyzed, the combination of brand impersonation, low trust scores, and security vendor detections confirms its classification as a high-risk crypto scam. Defenders should treat this domain as actively malicious, block resolution at the network level, and monitor for related indicators of compromise, including the IP address 188.114.97.3 and associated Cloudflare infrastructure. No evidence suggests this domain is affiliated with the legitimate Ledger brand.