access-ledzer-liive[.]pages[.]dev

This domain, access-ledzer-liive.pages.dev, is actively flagged as a high-risk phishing site impersonating Ledger, a cryptocurrency hardware wallet provider. Registered on March 30, 2026, through Cloudflare, Inc., the domain resolves to the IP address 188.114.97.3, which is associated with Cloudflare's infrastructure. The page title, 'Ledger Live manage Access Secure – Ledger official access,' explicitly mimics Ledger's branding and official software, suggesting an intent to deceive users into believing the site is legitimate. Analysis indicates the domain has been detected by 11 of 95 security vendors on VirusTotal, a notable detection rate that aligns with its classification as malicious. It appears on one security blocklist, specifically PhishDestroy, further corroborating its phishing status. The domain employs standard security technologies such as HSTS, Cloudflare, and HTTP/3, which are commonly used by both legitimate and malicious sites to evade detection or enhance perceived credibility. The SSL certificate is issued by Google Trust Services, a widely trusted certificate authority, which does not mitigate the domain's malicious intent. Infrastructure analysis reveals the domain is hosted on Cloudflare's content delivery network, a common tactic among phishing campaigns to leverage the provider's reputation and obfuscate the true origin of the attack. The Gridinsoft trust score of 0/100 reinforces the domain's high-risk classification. As of July 12, 2026, the domain remains active, posing an ongoing threat to users. Defenders are advised to block the domain and its resolving IP address (188.114.97.3) at the network level. Monitoring for similar domains registered through Cloudflare or resolving to the same IP range may help identify related phishing infrastructure. Users should be educated to verify domain authenticity before interacting with any site claiming to represent Ledger or other sensitive services.