guide-ledgerr-live[.]pages[.]dev

The domain guide-ledgerr-live.pages.dev is currently active and resolves to the Cloudflare‑hosted IP address 172.66.47.162, which is geolocated to Canada. The site presents a page title of “Ledger Live – Secure Crypto Wallet & Portfolio Management,” directly referencing Ledger’s official product line, and is classified as a brand‑impersonation campaign targeting Ledger users. Registration data shows the domain was created on 2026‑04‑04 through Cloudflare, Inc., and uses Cloudflare nameservers (elinore.ns.cloudflare.com, lewis.ns.cloudflare.com). TLS is provided by Google Trust Services (certificate identifier WE1) and the HTTP response returns status 200, indicating the site is reachable. Independent analysis by Gridinsoft assigns a trust score of 0/100, and VirusTotal reports 9 detections out of 94 scanned engines. The domain appears on a single security blocklist and has been blocked by PhishDestroy. Infrastructure details beyond the hosting provider are not publicly disclosed, and the exact malicious payload or credential‑harvesting mechanisms have not been observed. Defenders should block the domain at the DNS and web‑filter layers, monitor outbound connections to the associated IP, and enforce multi‑factor authentication for any Ledger‑related services. Continuous re‑evaluation is advised as additional indicators may emerge.