ledzer-live-e-n-us[.]pages[.]dev

This domain, ledzer-live-e-n-us.pages.dev, is actively impersonating Ledger, a hardware cryptocurrency wallet provider, as indicated by the page title 'Ledger® Live Wallet – Getting Started™™®' and confirmed brand target data. Registered on March 22, 2026, through Cloudflare, Inc., the domain resolves to the IP address 188.114.97.3, hosted under Cloudflare’s infrastructure in Canada. The site employs HTTP/3 and HSTS, leveraging Cloudflare’s nameservers (ethan.ns.cloudflare.com and hadlee.ns.cloudflare.com) and a Google Trust Services SSL certificate (WE1). Analysis reveals a trust score of 0/100, with one security blocklist (PhishDestroy) flagging it as malicious. VirusTotal reports 11 of 94 security vendors detecting the domain as harmful, aligning with its classification as a crypto scam. The domain remains active as of July 12, 2026, returning an HTTP 200 status. Defenders should prioritize blocking this domain at the DNS or network level, particularly in environments where Ledger-related services are used. The use of Cloudflare’s infrastructure may complicate takedown efforts, necessitating coordination with the hosting provider. No additional details about the specific phishing kit or payload are available at this time, but the domain’s focus on cryptocurrency suggests potential credential harvesting or wallet-draining activity.