desktop-livelegr[.]wasmer[.]app

This domain, desktop-livelegr.wasmer.app, is identified as a high-risk brand impersonation infrastructure targeting Ledger, a hardware cryptocurrency wallet provider. Analysis indicates the domain hosts a fraudulent replica of the Ledger Live desktop application, designed to deceive users into entering sensitive credentials or installing malicious software. The page title, 'Ledger Live Desktop® | Official Ledger Mobile & Desktop App,' explicitly mimics the legitimate Ledger branding to enhance credibility and trick victims into engagement. Infrastructure analysis reveals the domain was registered on June 12, 2026, through the Wasmer platform, a service enabling rapid deployment of web applications. It resolves to the IP address 62.210.172.147 and is secured with a Let's Encrypt SSL certificate, a common tactic to appear legitimate. The domain is flagged by 19 out of 95 security vendors on VirusTotal and appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Gridinsoft assigns it a trust score of 0/100, further confirming its malicious nature. No Google Safe Browsing (GSB) detection is noted in the current dataset. As of the latest assessment, the domain has been taken offline, reducing immediate exposure risk. However, the infrastructure's rapid deployment capabilities and the use of a reputable SSL provider suggest potential for resurgence under a similar or altered domain. Users who may have interacted with this domain are advised to revoke any connected wallet permissions, monitor for unauthorized transactions, and verify the authenticity of any Ledger-related software through official channels only. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.