ledzer-live-connect[.]pages[.]dev

The domain ledzer-live-connect.pages.dev is currently active and classified as a high‑risk brand‑impersonation site targeting Ledger. The site was registered on April 30 2026 through Cloudflare, Inc. and resolves to IP 188.114.97.3, which is associated with Cloudflare’s infrastructure in Canada. The SSL certificate is issued by Google Trust Services under the WE1 authority, and the domain employs HSTS, HTTP/3, and Cloudflare’s edge services. Nameserver entries point to elaine.ns.cloudflare.com and zac.ns.cloudflare.com. Gridinsoft assigns a trust score of 0 / 100, indicating a lack of reputation. VirusTotal analysis shows 7 of 91 security vendors flag the domain, and the domain appears on a single security blocklist, currently blocked by PhishDestroy. The HTTP response returns status 200, confirming the site is reachable. The page title captured is “Ledger Live | Connect Securely to Web3 & DeFi,” matching the declared brand target. No additional content, scripts, or behavioral indicators have been disclosed. Defenders should prioritize blocking the domain at perimeter filters, monitor DNS queries for the associated IP and nameservers, and update endpoint detection rules to flag any connections to the site. Continuous re‑scanning of the domain is advised to capture any changes in malicious activity or additional vendor detections.