ledgerlivedesktops[.]pages[.]dev

The domain ledgerlivedesktops.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. This scam specifically mimics Ledger Live desktop software to deceive users into divulging sensitive information or transferring cryptocurrency under false pretenses. No drainer kit was identified, but the site poses an elevated risk due to its cryptocurrency-focused fraud. As of the latest verification, ledgerlivedesktops.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of ledgerlivedesktops.pages.dev. The domain was registered through Cloudflare, Inc. on September 23, 2025, and resolves to the IP address 188.114.97.3, hosted by Cloudflare in Canada. Security vendors flagged the domain, with 1 of 95 VirusTotal vendors detecting it as phishing, and it appears on 1 security blocklist (PhishDestroy). The SSL certificate is issued by Google Trust Services / WE1, and the observed page title was 'Ledger Live (Desktop) — Guide'. Technologies detected include HSTS, Cloudflare, and HTTP/3, while the current HTTP status is 403. Google Safe Browsing has not flagged the domain.

Users who interacted with ledgerlivedesktops.pages.dev should immediately revoke any token approvals and transfer cryptocurrency to a new wallet to prevent unauthorized access. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions or login attempts. Report the phishing domain to Ledger’s official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.