app-ledger-com-live[.]pages[.]dev

The domain app-ledger-com-live.pages.dev was registered on February 21, 2026 and is currently hosted on Cloudflare’s network (AS13335) with the IP address 172.66.45.8 located in the United States. The site presents a Cloudflare‑generated page titled "Suspected phishing site | Cloudflare" and returns an HTTP 403 status, indicating that the content is deliberately blocked. The SSL certificate presented is issued by Google Trust Services under the WE1 authority, a typical certificate for Cloudflare‑proxied sites, and does not provide any indication of malicious self‑signed keys. Reputation services assign extremely low trust scores: Scamadviser rates the domain 1 / 100 and Gridinsoft 0 / 100, reflecting a high likelihood of abuse.

Google Safe Browsing flags the domain for social engineering, and PhishDestroy has already placed it on its blocklist. VirusTotal analysis shows that 9 of 93 scanning engines flag the domain, reinforcing the suspicion of malicious activity. The domain is explicitly noted to impersonate the Ledger brand and is classified as a crypto‑related scam.

No additional content or page details are available beyond the generic Cloudflare warning page, and the site’s current offline status suggests that the hosting provider has taken remediation steps. Defenders should immediately block the domain and its associated IP address, monitor for other newly created *.pages.dev subdomains that target Ledger or cryptocurrency users, and enforce URL filtering based on the observed indicators. Continuous observation of Cloudflare‑hosted domains with similar creation dates and low reputation scores is recommended to pre‑empt further impersonation attempts.