ledge-liv-dwnload[.]pages[.]dev

This domain, ledge-liv-dwnload.pages.dev, is confirmed as an active phishing site targeting users of the Ledger cryptocurrency hardware wallet brand. The page title, 'Download Ledger Live – Manage Bitcoin & Altcoins', explicitly impersonates the legitimate Ledger Live software download portal. The domain was registered on April 19, 2026, through Cloudflare, Inc., and resolves to IP address 172.66.44.225, which is located in Canada and associated with Cloudflare. The infrastructure employs HSTS, HTTP/3, and Cloudflare technologies, with nameservers anahi.ns.cloudflare.com and matteo.ns.cloudflare.com. An SSL certificate from Google Trust Services (WE1) is present. VirusTotal analysis shows 6 out of 94 security vendors flagging this domain as malicious, and it appears on one security blocklist. The Gridinsoft trust score is 0/100, and the site is blocked by PhishDestroy. Analysis indicates the domain is actively serving fraudulent content intended to deceive users into downloading a fake Ledger Live application, likely to steal cryptocurrency credentials or funds. Defenders should block access to this domain at the network level, add it to threat intelligence feeds, and alert users to avoid any downloads from this site. The exact page content beyond the title has not been analyzed, but the combination of brand impersonation, low trust score, and vendor detections confirms a high-risk threat. Ongoing monitoring is recommended as the domain remains active as of July 12, 2026.