live-ledzar[.]pages[.]dev

The domain live-ledzar.pages.dev was registered on March 23 2026 through Cloudflare, Inc. and is hosted on Cloudflare’s edge network, resolving to the IP address 188.114.97.3 located in Canada. The site presents the page title “Ledger Live | Easy, Secure, and Official Wallet App”, directly referencing Ledger’s official wallet product, and the intelligence flags it as a brand‑impersonation crypto scam targeting Ledger users. Technical inspection shows the site enforces HTTP Strict Transport Security and negotiates HTTP/3, indicating a modern TLS configuration. The SSL certificate is issued by Google Trust Services under the “WE1” profile, which is typical for Cloudflare‑proxied domains.

HTTP responses return a 403 status code, suggesting the endpoint is currently inaccessible, and the overall status is reported as offline. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. Reputation scoring from Gridinsoft assigns a trust score of 0 / 100, and VirusTotal analysis shows that 10 of 94 scanning engines flag the domain as malicious, reinforcing the suspicion of malicious intent. The page title and brand reference, combined with the elevated risk rating, support the classification as a crypto‑related brand‑impersonation campaign.

However, no additional content, such as login forms or malicious payloads, has been publicly captured, leaving the exact attack vector and victim interaction model unverified. Defenders should continue to block the domain at perimeter controls, monitor DNS queries for the resolved IP address, and add the domain to internal allow‑list exclusions. Continued observation of any changes to the HTTP status or content, as well as periodic re‑scanning with updated threat‑intel feeds, is recommended to confirm whether the infrastructure becomes active again.