web-lezger-destop-us[.]pages[.]dev

Analysis of the domain web-lezger-destop-us.pages.dev indicates active brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. The domain, registered on April 6, 2026, through Cloudflare, Inc., currently resolves to the IP address 188.114.96.3, associated with Cloudflare's infrastructure in Canada. Nameservers jack.ns.cloudflare.com and saanvi.ns.cloudflare.com further confirm Cloudflare hosting. The page title, 'Ledger Live Desktop – Secure Cryptocurrency (Official),' explicitly suggests an attempt to mimic Ledger's official desktop application, though the exact content and functionality of the site remain unanalyzed. Infrastructure review reveals the domain is actively serving content, returning an HTTP 200 status. The SSL certificate is issued by Google Trust Services (WE1), a common configuration for Cloudflare-hosted domains. Despite the absence of detections from 94 security vendors on VirusTotal as of July 12, 2026, this does not confirm the domain's legitimacy. The domain appears on one security blocklist, and Gridinsoft assigns it a trust score of 0/100, indicating high suspicion. Defenders are advised to treat this domain as malicious until further analysis confirms otherwise. Monitoring for user interactions, particularly those involving cryptocurrency transactions or credential submission, is recommended. Given the domain's recent registration and alignment with known brand impersonation tactics, organizations should consider proactive blocking or alerting mechanisms for this infrastructure.