ldgar-desk[.]pages[.]dev

This domain, ldgar-desk.pages.dev, is actively engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. The site mimics the official Ledger Live Desktop interface, likely aiming to deceive users into disclosing sensitive credentials or installing malicious software. As of the latest analysis, the domain remains operational and unmitigated. Infrastructure analysis reveals the domain was registered on October 17, 2025, through Cloudflare Pages, a platform frequently leveraged for rapid deployment of phishing infrastructure. It resolves to the IP address 172.66.47.56 and is secured with an SSL certificate issued by Google Trust Services (WE1). The domain has been flagged by 11 of 95 security vendors on VirusTotal and appears on at least one security blocklist, specifically PhishDestroy. The page title, "Ledger Live Desktop," further corroborates the intent to impersonate legitimate Ledger services. Current status indicates the domain remains active and poses a high risk to users. Organizations and individuals are advised to block the domain and associated IP at the network level. Users should verify the authenticity of any Ledger-related communications by accessing official channels directly. Security teams are recommended to monitor for similar domains leveraging Cloudflare Pages infrastructure, particularly those mimicking cryptocurrency brands. Immediate reporting to relevant hosting providers and certificate authorities is encouraged to facilitate takedown efforts.