ladjer-live-faqs[.]pages[.]dev

The domain ladjer-live-faqs.pages.dev was registered on April 05, 2026 through Cloudflare, Inc. It uses Cloudflare's nameservers aragorn.ns.cloudflare.com and vera.ns.cloudflare.com and resolves to the IP address 172.66.44.130, which is associated with Cloudflare, Inc. in Canada. The site presents the page title “Ledger Live — Secure Crypto Management App,” indicating a brand impersonation of Ledger. The SSL certificate is issued by Google Trust Services under the WE1 root, which is typical for Cloudflare‑proxied services. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one security blocklist. VirusTotal reports that one of ninety‑four scanning engines flags the domain, and PhishDestroy has also blocked it. HTTP response code is 200, and the site remains active as of the report date. The evidence confirms the domain is being used for a high‑risk brand‑impersonation campaign targeting Ledger users. Defenders should add the domain to blocklists, monitor DNS queries for the IP 172.66.44.130, and enforce email and web filtering rules that detect references to “Ledger Live” originating from this host. Because the underlying content has not been examined, further analysis of the page payload is advised to determine any credential‑harvesting mechanisms. Until more detail is available, the domain should be treated as malicious and prevented from reaching end users.