ldgr-live-destop-eng[.]pages[.]dev

Analysis indicates that the domain ldgr-live-destop-eng.pages.dev is actively serving content that references Ledger® Live desktop guidance, as reflected in the page title “Ledger® Live:Desktop | Getting started with Ledger — Secure Guide”. The domain was registered on 4 April 2026 through Cloudflare, Inc. and resolves to the Cloudflare edge IP 172.66.47.12 located in Canada. It uses Cloudflare’s default nameservers (kallie.ns.cloudflare.com, neil.ns.cloudflare.com) and presents a Google Trust Services certificate issued by WE1, suggesting a legitimate TLS connection. However, the site is flagged for brand impersonation of Ledger, is listed on a security blocklist, and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, and VirusTotal records 17 detections out of 94 scanners, reinforcing the malicious assessment. The HTTP response code is 200, indicating the page is reachable. No additional evidence such as malware payloads or credential harvesting mechanisms is disclosed. Defenders should continue to block the domain at network perimeter, monitor DNS queries for the domain, and add it to URL filtering lists. Further investigation of the page content is recommended to confirm any credential‑stealing forms or malicious redirects.