ledgers-lives-desktaup[.]pages[.]dev

The domain ledgers-lives-desktaup.pages.dev is currently active and resolves to the Cloudflare‑owned address 172.66.47.108, located in Canada. It was registered on May 01, 2026 through Cloudflare, Inc. and uses Cloudflare’s authoritative nameservers anita.ns.cloudflare.com and venkat.ns.cloudflare.com. The site serves HTTPS with a Google Trust Services / WE1 certificate and has HSTS and HTTP/3 enabled, indicating a modern TLS configuration. The page title returned by the server is "Ledger Live Desktop Getting Started | Ledger Support®", and the threat classification is a brand‑impersonation campaign targeting Ledger. VirusTotal records show that 10 of 91 scanned security vendors flag the domain as malicious, and the domain is listed on at least one security blocklist. It has also been blocked by the PhishDestroy service. While the infrastructure signals a deliberately crafted site—valid TLS, Cloudflare CDN, and a Ledger‑related title—no direct content analysis is available, so the exact phishing payload or credential‑harvesting mechanisms cannot be confirmed. Defenders should treat the domain as high‑risk: add it to URL filtering and DNS blocklists, monitor outbound connections to the associated IP, and consider isolating any endpoint that may have accessed the page. Ongoing telemetry should be collected to confirm any attempted credential capture or malware delivery.