install-ledgrlive-project[.]pages[.]dev

This domain, install-ledgrlive-project.pages.dev, is actively impersonating Ledger, a cryptocurrency hardware wallet provider, as indicated by the page title 'Ledger Live Download and Install Ledger Live' and the scam type classified as brand impersonation. Registered on March 26, 2026, through Cloudflare Pages, the domain resolves to IP 188.114.96.3, hosted on Cloudflare infrastructure in Canada. The site currently returns an HTTP 200 status, confirming its operational status. Analysis of available intelligence shows the domain has been flagged by at least one security blocklist and is blocked by PhishDestroy. Two of 94 security vendors on VirusTotal have detected malicious activity associated with this domain. The SSL certificate is issued by Google Trust Services (WE1), a common practice for both legitimate and malicious sites. While the exact content and functionality of the site remain unanalyzed, the combination of brand impersonation, active status, and security vendor detections indicates a high-risk threat targeting users seeking Ledger Live software. Defenders should prioritize blocking this domain at the DNS and network levels, monitoring for related infrastructure, and alerting users to avoid downloading software from unofficial sources. Further investigation into associated IP ranges and certificate reuse may uncover additional malicious domains.