ledzer-cloud-live-deskup[.]pages[.]dev

Analysis indicates the domain ledzer-cloud-live-deskup.pages.dev is actively impersonating Ledger, a cryptocurrency hardware wallet provider. Registered on March 30, 2026, through Cloudflare, Inc., the domain resolves to IP 172.66.44.135, hosted on Cloudflare infrastructure in Canada. The page title, 'Secure – Ledger Live Desktop,' directly references Ledger's legitimate software, suggesting an attempt to deceive users into believing the site is an official Ledger platform. The domain is flagged by 8 of 94 security vendors on VirusTotal and appears on one security blocklist, with a Gridinsoft trust score of 0/100. Technologies detected include HSTS, Cloudflare, and HTTP/3, which are consistent with modern phishing infrastructure leveraging content delivery networks to evade detection. The domain remains active as of July 12, 2026, and is classified as a brand impersonation scam. Defenders should prioritize blocking this domain at the DNS or network level, particularly in environments where Ledger products are used. While the exact content of the site has not been analyzed, the combination of brand impersonation, low trust scores, and active security vendor detections confirms its malicious intent. No legitimate use case for this domain is evident based on available data.