ledgr-live-desktop-usa[.]pages[.]dev

The domain ledgr-live-desktop-usa.pages.dev was registered on April 06, 2026 through Cloudflare, Inc. and resolves to the Cloudflare‑owned IP address 188.114.97.3, which is geolocated to Canada. The authoritative nameservers are bill.ns.cloudflare.com and mira.ns.cloudflare.com, and the site presents a valid SSL certificate issued by Google Trust Services (WE1). An HTTP GET returns status 200 and the page title reads "Ledger Live Desktop — Official Guide," directly referencing the Ledger brand. VirusTotal scans have flagged the domain by 9 of 94 security vendors, and it is currently listed on one public security blocklist. PhishDestroy has already blocked the domain, and the Gridinsoft trust score is 0 out of 100, indicating a high confidence of malicious intent. The threat is classified as brand impersonation targeting Ledger, with a high risk rating and an active status. While the page title confirms the intent to mimic Ledger’s official guidance, the exact content and any credential‑harvesting mechanisms have not been publicly disclosed. Defenders should immediately add the domain to DNS‑based blocklists, enforce HTTPS inspection to capture any potential malicious payloads, and monitor outbound connections to the resolved IP. Continuous re‑evaluation of the domain’s reputation is advised, given the active nature of the campaign and the low trust score reported by Gridinsoft.