desktop-lgur[.]pages[.]dev

The domain desktop-lgur.pages.dev was registered on March 30, 2026 through Cloudflare, Inc. It resolves to the Cloudflare‑owned address 172.66.44.77, which geolocates to Canada. The domain uses the Google Trust Services / WE1 SSL certificate, and its authoritative nameservers are ashton.ns.cloudflare.com and simone.ns.cloudflare.com. An HTTP request returns status 200 and the page title "Ledger Live Desktop | Official Wallet Management Software Ksh," indicating a brand‑impersonation attempt targeting Ledger. Security assessments show a Gridinsoft trust score of 0/100, the domain appears on one security blocklist, and it is blocked by PhishDestroy. VirusTotal analysis reports three of ninety‑four scanners flagging the domain as malicious. The threat is classified as brand impersonation with a high risk rating and remains active. Defenders should proactively block desktop-lgur.pages.dev at perimeter and endpoint controls, monitor for any related C2 or credential‑harvesting activity, and consider adding the domain to internal threat feeds. Continuous observation of Cloudflare‑hosted infrastructure is advised, as the low trust score and multiple detections suggest a purposeful malicious campaign.