cdn-ledgrcom-faqs[.]pages[.]dev

This domain is flagged as a confirmed brand-impersonation phishing site targeting Ledger. The domain cdn-ledgrcom-faqs.pages.dev was created on April 30, 2026, and remains active as of July 12, 2026, serving an HTTP 200 status. It resolves to IP address 188.114.96.3, which is located in Canada and hosted by Cloudflare, Inc. The domain was registered through Cloudflare, Inc., and its nameservers are adelaide.ns.cloudflare.com and alfred.ns.cloudflare.com. The page title is 'Getting Started with Ledger Live — Independent Guide,' which is a fraudulent guide impersonating the legitimate Ledger cryptocurrency hardware wallet brand. Security scanning on VirusTotal shows 7 out of 91 vendors flagging the domain as malicious, and it appears on one security blocklist. The Gridinsoft trust score is 0 out of 100, indicating high risk. The SSL certificate is issued by Google Trust Services (WE1). The site is already blocked by the PhishDestroy blocklist. Analysis indicates this domain is part of a targeted phishing campaign designed to deceive users seeking Ledger support or setup guidance. Defenders should block the domain at the network level, monitor for related subdomains or variations under pages.dev, and warn users not to interact with any content from this domain. The exact page content beyond the title has not been visually analysed, but the domain's registration and hosting patterns are consistent with phishing infrastructure.