live-en-us-download[.]pages[.]dev

This domain, live-en-us-download.pages.dev, is identified as a brand impersonation threat targeting Ledger, a cryptocurrency hardware wallet provider. Analysis indicates the domain was designed to mimic the official Ledger Live application download page, as evidenced by the page title 'Ledger Live Crypto Wallet App | Ledger.' The intent appears to be the distribution of malicious software or the harvesting of sensitive user credentials under the guise of a legitimate crypto wallet application. No explicit crypto drainer kit signatures were detected, but the domain's infrastructure and content align with typical brand impersonation tactics used to deceive users into downloading counterfeit applications. Technical indicators reveal the domain was registered through Cloudflare, Inc. on March 27, 2026, an anomalous future date suggesting potential falsification or misconfiguration. It resolves to the IP address 188.114.96.3 and is served via Cloudflare infrastructure, utilizing technologies such as HSTS and HTTP/3. The SSL certificate is issued by Google Trust Services, adding a layer of apparent legitimacy. VirusTotal detection shows 7 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious nature. As of the latest assessment, live-en-us-download.pages.dev has been taken offline, likely in response to security vendor interventions or hosting provider actions. However, the risk of re-emergence remains elevated due to the domain's recent registration anomalies and the persistent threat posed by brand impersonation schemes targeting cryptocurrency users. Organizations and individuals are advised to monitor for similar domains leveraging the Ledger brand, particularly those hosted on content delivery networks or utilizing SSL certificates from widely trusted issuers. Users should verify the authenticity of any Ledger-related downloads by accessing the official website directly and avoiding third-party distribution channels.