live-laedgar-en-ui[.]pages[.]dev

live-laedgar-en-ui.pages.dev was registered on 2026-04-20 through Cloudflare, Inc. The domain resolves to the Cloudflare IP 188.114.96.3 located in Canada. DNS resolution uses the nameservers achiel.ns.cloudflare.com and sasha.ns.cloudflare.com. The site serves an HTTPS certificate issued by Google Trust Services under the WE1 framework, and the connection enforces HTTP Strict Transport Security and HTTP/3. An HTTP GET returns status code 200 and the page title “Ledger Live Integrations — Presentation”, which aligns with the reported brand‑impersonation of Ledger. VirusTotal records eight detections out of ninety‑four scanners, and the domain is listed on one public blocklist. PhishDestroy has already blocked the domain, and Gridinsoft assigns a trust score of 0 out of 100. The risk rating is high and the domain remains active. No additional payload, malware, or credential‑stealing infrastructure has been observed beyond the brand‑impersonation indicator. Defenders should add the domain to block lists, monitor DNS queries for the associated IP and nameservers, and enforce TLS inspection to capture any malicious payload that may be delivered through the site. Ongoing analysis is required to determine whether the page hosts malicious scripts or redirects, as the current evidence is limited to metadata.