live-leedgar-eu-us[.]pages[.]dev

The domain live-leedgar-eu-us.pages.dev was registered on May 01 2026 through Cloudflare, Inc. and resolves to IP 188.114.97.3, which is geolocated to Canada and served from Cloudflare infrastructure. The site presents an HTTP 200 response, advertises HSTS, HTTP/3, Tailwind CSS, and is protected by an SSL certificate issued by Google Trust Services (WE1). The page title observed is "Ledger Live – The Ultimate Secure Crypto Management App | Ledger Device Integration," indicating a direct brand impersonation of Ledger. Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports that 9 of 91 security vendors flag the domain, confirming malicious characteristics. The domain is currently listed on one security blocklist and has been blocked by PhishDestroy, reinforcing its active status. Defenders should treat the domain as high‑risk, enforce DNS‑level blocking or sink‑holing, and monitor outbound connections to the associated IP. Given the lack of publicly available content beyond the title, the exact payload (e.g., credential‑stealing forms) remains unverified; however, the combination of brand‑specific title, low trust score, and multiple vendor detections strongly suggests a credential‑phishing campaign targeting Ledger users. Continuous threat‑intel updates and endpoint detection rule adjustments are recommended to mitigate potential compromise.