guide-us-ledgerr-live-desktop[.]pages[.]dev

The domain guide-us-ledgerr-live-desktop.pages.dev was registered on March 22, 2026 and resolves to the Cloudflare address 172.66.45.7. Infrastructure analysis shows the domain is served behind Cloudflare with HSTS enabled and HTTP/3 support, and the TLS certificate is issued by Google Trust Services under the WE1 identifier. The site returns HTTP 403 for the initial request, and its page title is "Ledger Live Desktop | Track, Stake," explicitly referencing the Ledger brand. Threat intelligence classifies the activity as a high‑risk crypto scam employing brand impersonation of Ledger. The domain appears on one security blocklist and is currently listed by PhishDestroy. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal reports 11 of 94 scanners flagging the domain as malicious. Nameservers are bristol.ns.cloudflare.com and jihoon.ns.cloudflare.com, confirming Cloudflare registration. Defenders should block the domain and its resolving IP at network perimeter devices, add the domain to URL filtering and email anti‑phishing rules, and monitor Cloudflare‑associated IP ranges for related activity. Users should be warned that any unsolicited request to a Ledger‑branded interface originating from this domain is likely fraudulent, and credential or wallet information entered there may be harvested for theft. The precise payload or credential‑harvesting mechanism remains unknown pending deeper content analysis.