desktop-en-ledger-live[.]pages[.]dev

The domain desktop-en-ledger-live.pages.dev poses a significant threat through brand impersonation, specifically targeting Ledger. The page title "Ledger Live Download" suggests the intent to deceive users into downloading potentially malicious software or sharing sensitive information under the guise of a legitimate service. The active status of this domain further indicates ongoing operational risks for users who may mistakenly trust its content.

Evidence collected indicates that the domain was created on March 27, 2026, and currently appears on one security blocklist, specifically being blocked by PhishDestroy. Furthermore, security analysis via VirusTotal revealed that 2 out of 95 security vendors flag this domain, highlighting its suspicious nature. The domain is registered through Cloudflare Pages and resolves to IP address 188.114.97.3, which is associated with CloudFlare, Inc. located in Canada. This information emphasizes the infrastructure behind the phishing campaign and suggests that the operation is being maintained actively.

Users who may have visited this domain are advised to exercise caution and take immediate action. It is recommended that they ensure their systems are scanned for any potential malware and reset any credentials that may have been compromised during their interaction with this site. Additionally, users should remain vigilant against phishing attempts and report any suspicious activity to the appropriate cybersecurity authorities.