ladgerr-live-desktop[.]pages[.]dev

This domain presents an elevated risk as a brand impersonation campaign targeting Ledger users. The threat is specifically a crypto drainer designed to steal cryptocurrency wallet credentials by masquerading as the legitimate Ledger Live Desktop application. Visitors are lured into entering their 24-word recovery phrase, which is then captured by attackers to drain funds from the victim's wallet. The domain has been taken offline, but similar clones may appear under different subdomains.

Technical indicators paint a clear picture of malicious intent. VirusTotal shows 5 out of 95 security vendors flagging this domain as dangerous. The domain was registered through Cloudflare, Inc. on March 25, 2026, and resolves to IP address 188.114.97.3. It appears on 1 security blocklist and was issued an SSL certificate by Google Trust Services, which provides a false sense of legitimacy. The page title explicitly reads 'Ledger Live Desktop — Secure Desktop Companion for Your Crypto,' further tricking users. PhishDestroy's analysis confirms these details and assigns a trust score of 0/100 due to the impersonation pattern.

To stay safe, never enter your recovery phrase on any website. Only download Ledger Live from the official Ledger website or app stores. Verify URLs carefully: note the misspelling 'ladgerr' instead of 'ledger' and the pages.dev domain, which is a free hosting service often abused by phishers. If you have already entered credentials on this site, transfer funds to a new wallet immediately and contact Ledger support. Use PhishDestroy's browser extension to block such domains proactively.