::
Hi,
the actual site is https://www.ledger.com ; However, even if you only type „ledger.com“, it will redirect to the secure https site.
Most modern browsers remove „http/https“ and/or „www“ and only show the domain. If you want to see the full URL, in most browsers you can double-click the URL and the full path will show.
In regards to Ledger Live: both download links lead to the same site. It is no problem to link to the same download pages in multiple places on your website. They probably just did it for more people to find their software.
TL:DR
This is the legit and secure ledger site with multiple links to the download page.