ledgjer--live-desktop[.]pages[.]dev

PhishDestroy research identifies ledgjer--live-desktop.pages.dev as an active brand-impersonation domain targeting Ledger. The threat is a fraudulent replica of Ledger’s official Live Desktop portal designed to harvest user credentials or inject malware under the guise of a security update. It is currently under investigation and remains unblocked by most antivirus engines, making it a latent risk to cryptocurrency holders who download unverified software. This domain was flagged by PhishDestroy seed 2d568a with page title “Ledger Live Desktop: The Ultimate Security Hub”. It resolves to IP 172.66.44.177, uses a Google Trust Services SSL certificate, and is served via Cloudflare, Inc. registrar. VirusTotal shows 0 detections out of 95 engines and no listings on public blocklists. The impersonation closely mirrors official branding, increasing likelihood of successful deception. Mitigation is critical: users should never download Ledger Live from third-party domains. Confirm the correct URL at https://www.ledger.com/ledger-live and verify the desktop app’s digital signature before installation. If you already interacted with this domain, revoke any entered credentials immediately, run a malware scan, and report the URL to Ledger’s abuse team and your antivirus vendor.