ledger-live--desktop[.]pages[.]dev

This domain, ledger-live--desktop.pages.dev, was flagged as a crypto scam impersonating Ledger, a hardware wallet provider. Registered on February 21, 2026, through Cloudflare, Inc., the domain resolves to IP 188.114.97.3 (AS13335, US) and is hosted on Cloudflare nameservers miles.ns.cloudflare.com and vita.ns.cloudflare.com. Analysis indicates the site was taken offline by July 23, 2026, returning an HTTP 403 status with a page title of 'Suspected phishing site | Cloudflare.' The SSL certificate is issued by Google Trust Services (WE1), and the domain employs HSTS and HTTP/3 technologies. Detection data shows the domain appeared on one security blocklist (PhishDestroy) and was flagged by 12 of 95 security vendors on VirusTotal.

Trust scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively, reinforcing its malicious classification. No evidence of a phishing kit or specific attack vector is present in the available data, but the domain’s structure and naming convention strongly suggest an intent to deceive users into believing it is an official Ledger Live desktop application. Defenders should treat this domain as confirmed malicious due to its blocklist presence, low trust scores, and vendor detections. The domain’s Cloudflare hosting and recent registration align with common phishing infrastructure patterns.

While the site is currently offline, historical DNS and WHOIS records should be preserved for forensic analysis. Network-level blocks at the IP and domain level are recommended, along with monitoring for related subdomains or re-registration attempts under similar naming schemes. No further content analysis is available, as the site was inaccessible at the time of review.