ladger-live-desktops[.]pages[.]dev

This domain ladger-live-desktops.pages.dev is currently active and hosts a page titled “Ledger Live Desktop — Official Guide”. The page title and the declared brand target “Ledger” indicate a brand‑impersonation campaign aimed at Ledger users. The domain was registered on 2026-04-06 through Cloudflare, Inc. and is served from Cloudflare’s network (IP 188.114.96.3, location CA). DNS resolves via bill.ns.cloudflare.com and mira.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 root, which may lend credibility to unsuspecting visitors. HTTP responses return status 200, and the site is listed on one security blocklist and has a Gridinsoft trust score of 0/100. VirusTotal analysis shows that 2 of 94 scanners flagged the domain, confirming malicious intent. The specific credential‑capture mechanisms have not been disclosed, so the exact payload remains unknown. Defenders should block the domain at the network perimeter, add it to URL filtering policies, and monitor for traffic to the associated IP range. Incident response teams should treat any credentials submitted to this domain as compromised and advise affected Ledger users to reset authentication factors.