en-us-co-desktoplive[.]pages[.]dev

The domain en-us-co-desktoplive.pages.dev was engaged in brand impersonation, specifically targeting Ledger, a popular cryptocurrency hardware wallet company. This domain is currently offline, which is a positive development, but it remains a significant threat to users who may have interacted with it while active. PhishDestroy identified this domain as a sophisticated phishing attempt designed to steal sensitive information from Ledger users.

According to our analysis, this domain was created on May 01, 2026, and resolved to the IP address 188.114.96.3. It was registered through Cloudflare, Inc., and used an SSL certificate from Google Trust Services / WE1. The page title was "Ledger® Live Desktop® — Getting Started," which closely mimics the legitimate Ledger Live interface. VirusTotal flagged this domain with 12 out of 95 security vendors, indicating moderate to high risk. It also appeared on 1 security blocklist. The low blocklist count may be due to the domain's recent creation and short active period.

Given that the domain is now offline, the immediate threat is reduced, but users should remain vigilant. Anyone who visited this site and entered their Ledger credentials or seed phrases should immediately transfer their funds to a new wallet and contact Ledger support. It is also recommended to run a security scan on the device used to access the site. PhishDestroy advises all users to always verify URLs carefully and enable two-factor authentication for additional security. For a detailed breakdown of indicators, check the full report.