ledge-live-hardware[.]pages[.]dev

This domain, ledge-live-hardware.pages.dev, is under investigation for brand impersonation targeting Ledger, a hardware wallet provider. Analysis indicates the site presents itself as a legitimate Ledger service, with the page title 'Ledger Hardware Wallet — The Future of Crypto Security' explicitly mimicking Ledger’s branding. The domain was registered on April 20, 2026, through Cloudflare, Inc., and is currently active. It resolves to IP address 172.66.47.73 and employs SSL certification from Google Trust Services. Security infrastructure includes HSTS and HTTP/3, alongside Cloudflare’s network, which may complicate takedown or attribution efforts. The domain appears on one security blocklist (PhishDestroy) but has not been flagged by any of the 95 vendors in a recent scan, though the absence of detections does not confirm safety. Gridinsoft assigns a trust score of 0/100, reflecting high suspicion. Defenders should note that the domain’s registration and hosting patterns align with known phishing infrastructure, particularly given its use of a subdomain under Cloudflare Pages, a common tactic to evade detection and leverage free hosting. While the exact content and functionality of the site remain unanalyzed, the combination of brand impersonation, recent registration, and low detection rates warrants immediate caution. Defenders are advised to block the domain at the network level, monitor for related subdomains or IPs, and alert users to potential crypto-related fraud. Further investigation into the site’s backend or associated wallet addresses may reveal additional indicators of compromise.