ledger-live-wallet--us[.]pages[.]dev

Analysis indicates that ledger-live-wallet--us.pages.dev was registered on September 13, 2025 through Cloudflare, Inc. and currently resolves to IP address 188.114.97.3 located in CA. The domain uses nameservers jihoon.ns.cloudflare.com and marjory.ns.cloudflare.com along with technologies including HSTS, Cloudflare and HTTP/3. It returns an HTTP status of 200 and carries a Gridinsoft trust score of 0/100 while appearing on three security blocklists. VirusTotal reports detections from 2 out of 95 vendors. The domain remains active as of the July 12, 2026 report date and is blocked by PhishDestroy, MetaMask and SEAL.

The recorded threat classification is brand_impersonation with a cryptocurrency scam type targeting Ledger. The page title present on the domain is Ledger Hardware Wallet: Premium Crypto Security Solution. These data points establish direct linkage to the specified brand and scam category without reliance on external assumptions about site content. Domain age since September 2025 places the registration within normal operational timeframes relative to the current date.

What remains uncertain is the precise payload or interactive elements hosted at the time of any future inspection, as no visual or structural analysis of the live page has been performed. Infrastructure details such as ASN ownership beyond the listed Cloudflare registration and exact blocklist naming conventions are also not further elaborated in available records.

Defenders should incorporate the domain and its IP 188.114.97.3 into watchlists, enforce blocking at DNS and endpoint layers, and monitor for related subdomains or IP rotations under the same nameservers. Continued observation of VirusTotal and blocklist updates is recommended to track any change in detection counts or status.