en-us-live-ledgre-agd[.]pages[.]dev

Domain en-us-live-ledgre-agd.pages.dev is an active crypto-brand impersonation threat currently under investigation. This Cloudflare Pages-hosted domain mimics the official Ledger Live Desktop interface to deceive users into downloading malicious software or disclosing credentials. This domain was flagged by zero of 95 VirusTotal security vendors as of the latest scan. It is registered through Cloudflare, Inc. and resolves to IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services, suggesting initial credibility. The page title “Ledger Live Desktop – Secure Crypto Management” closely replicates the legitimate Ledger branding to increase user trust. It appears this impersonation site is still active and has not yet been widely blacklisted.

This domain represents a medium-to-high risk due to its use of brand impersonation targeting cryptocurrency users. While VirusTotal currently shows no detections, the domain's content and branding strongly indicate malicious intent to harvest credentials or drain crypto wallets. The combination of Cloudflare hosting, valid SSL, and Ledger-themed content increases the likelihood of successful deception.

Users are strongly advised not to interact with this domain. If accessed accidentally, do not enter any credentials or download software. Block the domain at the network level and report it to browser security teams and threat intelligence platforms. Monitor cryptocurrency wallet activity for unauthorized transactions. Always verify URLs and use official applications from verified sources.