pro-ledger-live[.]pages[.]dev

This domain, pro-ledger-live.pages.dev, is flagged as an active brand impersonation phishing campaign targeting the Ledger brand. It was registered on April 27, 2026, through Cloudflare, Inc., and resolves to IP address 172.66.47.10 located in Canada (Cloudflare, Inc.). The domain uses nameservers jaime.ns.cloudflare.com and ximena.ns.cloudflare.com, with an SSL certificate issued by Google Trust Services (WE1). The page title, as observed, is 'Ledger Live | Ledger Live Crypto Wallet App,' and the server returned an HTTP 200 status. VirusTotal analysis shows 12 out of 91 security vendors flagging this domain as malicious. The domain's Gridinsoft trust score is 0/100, and it appears on one security blocklist. Technologies detected include HSTS, Cloudflare, and HTTP/3. The domain is currently blocked by PhishDestroy. The exact content of the website has not been visually inspected, but the page title and brand target confirm impersonation of Ledger, a cryptocurrency wallet provider. Defenders should block this domain at the network level and add it to threat intelligence feeds. Users should avoid visiting this domain, as it is likely used to harvest credentials or sensitive information from Ledger users. No additional details about the phishing kit or victim data are available at this time.