leedgre-live-io[.]pages[.]dev

This domain, leedgre-live-io.pages.dev, was registered on 2026-04-30 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 188.114.96.3 located in Canada. The authoritative nameservers are jacob.ns.cloudflare.com and marge.ns.cloudflare.com, indicating that the infrastructure is fully hosted on Cloudflare’s network. The site presents the page title “Ledger® Live Wallet – Getting Started™ | Developer Portal”, directly referencing the Ledger brand, and is classified as a brand‑impersonation campaign. HTTP requests return status 200 and the site enforces HSTS, supports HTTP/3, and presents a Google Trust Services / WE1 TLS certificate, which is typical for Cloudflare‑proxied services. Reputation scans show a Gridinsoft trust score of 0/100 and eight of ninety‑one VirusTotal scanners flag the domain, while it appears on a single external blocklist and is already blocked by PhishDestroy. The risk rating is high and the campaign remains active. At present, no additional payload or credential‑harvesting behavior has been publicly disclosed, and the exact content of the page beyond the title has not been analysed. Defenders should add the domain and its resolving IP to deny‑list rules, monitor DNS queries for the associated nameservers, and treat any traffic as potentially malicious. Continuous re‑scanning is advised to capture any future changes in detection status.