ledger-live-dsktop-fast[.]pages[.]dev

This domain, ledger-live-dsktop-fast.pages.dev, is flagged as a high-risk brand impersonation threat targeting Ledger, a hardware cryptocurrency wallet provider. The site mimics the official Ledger Live Desktop interface, presenting itself as a legitimate crypto management platform with the page title 'Ledger Live Desktop — Manage Your Crypto Securely.' Analysis indicates this is likely part of a broader campaign to deceive users into entering sensitive credentials or wallet recovery phrases, potentially leading to unauthorized access or asset theft. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on October 13, 2025, and resolves to the IP address 172.66.47.112, located in the US under AS13335 (Cloudflare, Inc.). The domain appears on one security blocklist and is flagged by 10 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious domains leveraging Cloudflare's hosting services. No Google Safe Browsing (GSB) detections are currently reported, though this may reflect a lag in propagation rather than absence of malicious activity. As of the latest verification, the domain remains active and unmitigated. Users are advised to treat any interaction with this domain as malicious and avoid entering credentials or connecting wallets. Organizations should update blocklists to include this domain and its resolving IP, while monitoring for related infrastructure (e.g., subdomains, newly registered lookalike domains). The remaining risk is elevated due to the domain's continued operation and the high-value target (cryptocurrency users), warranting proactive defensive measures.