live-leedger-ask[.]pages[.]dev

The domain live-leedger-ask.pages.dev is a high-risk brand impersonation threat currently active. It specifically targets the Ledger brand, attempting to deceive users into believing it is an official Ledger resource.

This domain is flagged by 3 of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through Cloudflare Pages and resolves to the IP address 188.114.96.3, which is located in California, USA, and is managed by CloudFlare, Inc. The SSL certificate for this domain is issued by Google Trust Services / WE1, which may lend it an air of legitimacy. The domain was created on May 06, 2026, and it appears on 1 security blocklist, specifically PhishDestroy. The page title, 'How to Use Ledger® Live: Desktop® on Mobile | Official Ledger Wallet™ App,' further reinforces the impersonation attempt by mimicking official Ledger content.

Given the current active status of the domain, it is recommended that users exercise extreme caution when encountering links or content related to this domain. Security teams should consider adding this domain to their blocklists and educating users about the risks of brand impersonation. Additionally, monitoring for similar domain registrations and IP activity can help in identifying and mitigating related threats.