lives-leadgr-en[.]pages[.]dev

This domain, lives-leadgr-en.pages.dev, was identified as a phishing site impersonating Ledger, a cryptocurrency wallet provider. Analysis indicates the domain was registered on March 23, 2026, through Cloudflare, Inc., and was hosted on nameservers eleanor.ns.cloudflare.com and noel.ns.cloudflare.com. The page title, 'Ledger Live | Secure Crypto Wallet,' directly matches Ledger's branding, confirming the intent to deceive users into believing the site is legitimate. The domain resolved to IP address 188.114.97.3, associated with Cloudflare's infrastructure in Canada, and employed technologies such as HSTS, Cloudflare, and HTTP/3.

As of July 25, 2026, the domain has been taken offline, returning an HTTP 403 status. Prior to its removal, the domain was flagged by 16 of 94 security vendors on VirusTotal and appeared on one security blocklist, including PhishDestroy. Gridinsoft assigned a trust score of 0/100, further indicating malicious intent. The SSL certificate was issued by Google Trust Services (WE1), a common practice among phishing domains leveraging Cloudflare's services to appear legitimate.

While the exact content of the phishing page remains unanalyzed, the available evidence—including the page title, brand impersonation, and detection by multiple security vendors—classifies this as a crypto scam. Defenders should treat this domain as a confirmed phishing threat targeting Ledger users and ensure it remains blocked across security controls. No additional indicators of compromise (IoCs) or attack vectors have been confirmed at this time.