live-ledger[.]pages[.]dev

live-ledger.pages.dev is a tenant hostname on Cloudflare, not a separately registered domain. PhishDestroy first recorded this hostname on Jun 14, 2026. The hostname explicitly references Ledger; stored content metadata identifies the same apparent target. The captured page title is “Ledger® Live | Getting Started™ with Ledger®”. The stored content classification is brand impersonation. Evidence score: 89/100 (high).

Positive source (1): VirusTotal. VirusTotal recorded 8 detections among 91 engines: alphaMountain.ai, BitDefender, CyRadar, Fortinet, G-Data, Kaspersky, Netcraft, Sophos on Aug 5, 2026 at 14:24 UTC. Other stored checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. URLQuery recorded no positive detection. Google Safe Browsing returned no flag on Mar 26, 2026 at 07:02 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:02 UTC. Cloudflare is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. This is shared platform infrastructure; the IP and ASN are hosting context, not attribution to unrelated tenants. The stored server header is cloudflare. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. The platform TLS certificate was issued by Google Trust Services / WE1 with validity through Jun 23, 2026; checked Apr 11, 2026 at 06:07 UTC.

VirusTotal is the only positive source family in the stored checks; the other recorded checks did not corroborate it at their collection times.