name-download[.]pages[.]dev

This domain, name-download.pages.dev, poses as an official source for Ledger Live software but is a brand impersonation site designed to distribute malicious crypto management tools. Visitors expecting legitimate Ledger applications may unknowingly download malware capable of compromising cryptocurrency wallets, intercepting transactions, or executing unauthorized transfers. The site mimics Ledger’s branding, including logos, color schemes, and page layout, to deceive users into believing it is an authentic download portal. Analysis indicates the domain was registered on April 30, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3. Despite its deceptive appearance, the site has not been widely flagged by security vendors, with a VirusTotal detection score of 0/95. It appears on only one security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0/100. The SSL certificate is issued by Google Trust Services, and the site employs HSTS and HTTP/3 protocols, which are common in legitimate services but also used here to lend false credibility. If you visited name-download.pages.dev or downloaded files from it, take immediate action to secure your devices and assets. Disconnect the affected device from the internet to prevent potential data exfiltration. Run a full scan using updated antivirus software to detect and remove any malicious payloads. If you entered any credentials or wallet information, assume they are compromised and revoke access to associated accounts or wallets. Monitor cryptocurrency transactions for unauthorized activity and consider migrating assets to a new, secure wallet. Report the incident to relevant security teams and avoid interacting with the domain further.