download--ledgerlive-us[.]pages[.]dev

The domain download--ledgerlive-us.pages.dev is associated with a phishing scam that involves brand impersonation of Ledger, a well-known cryptocurrency wallet provider. This domain was designed to deceive users into believing it was a legitimate source for downloading Ledger Live, posing an elevated risk to individuals seeking to manage their cryptocurrency securely. As of now, the site has been taken offline, mitigating its immediate threat.

Technical indicators for download--ledgerlive-us.pages.dev include detections by 2 out of 95 security vendors on VirusTotal, specifically LevelBlue and Phishing Database. The domain was registered through Cloudflare, Inc., with a creation date of September 25, 2025, and resolves to the IP address 172.66.44.175. It appears on 1 security blocklist, specifically PhishDestroy. The SSL certificate was issued by Google Trust Services / WE1. The page title observed was 'Ledger Live Download - Ultimate Cryptocurrency Wallet'.

Users who may have interacted with download--ledgerlive-us.pages.dev should take immediate safety steps. If any cryptocurrency wallet information was provided, it is crucial to revoke token approvals and transfer funds to a new wallet to prevent unauthorized access. For those who may have submitted login credentials, changing passwords and enabling two-factor authentication is recommended. Users should also monitor their accounts for any suspicious activity. To report such phishing scams, users can contact relevant cybersecurity authorities and Ledger's support team directly.