ledgr-desktoplive[.]pages[.]dev

This domain, ledgr-desktoplive.pages.dev, poses as the official Ledger Live Desktop application interface to deceive users into entering sensitive cryptocurrency wallet credentials or installing malicious software. The site is designed to harvest private keys, recovery phrases, or other authentication details, enabling attackers to drain crypto assets from victim wallets. The page title explicitly mimics Ledger's branding, displaying 'Ledger Live Desktop® | Manage Your Crypto™ Assets Safely,' which increases the likelihood of successful social engineering against Ledger users. Analysis indicates this domain was registered on April 12, 2026, through Cloudflare, Inc., an unusually future-dated creation that may suggest domain generation algorithm abuse or timestamp manipulation. Infrastructure reveals the domain resolves to IP address 188.114.96.3, hosted on Cloudflare infrastructure in Canada. Security vendor scans on VirusTotal show 12 out of 95 engines flagging the domain as malicious, with detections including phishing, brand impersonation, and crypto-related fraud. The domain also appears on one security blocklist, further confirming its malicious classification. If a user has visited ledgr-desktoplive.pages.dev or interacted with its content, immediate action is required. Disconnect the device from the internet to prevent potential data exfiltration. Do not enter any credentials or recovery phrases, and avoid executing any downloads from the site. Reset all Ledger-related passwords using a separate, trusted device, and enable multi-factor authentication where available. Scan the affected device with updated security tools to detect and remove any installed malware. Users should also monitor their crypto wallets for unauthorized transactions and consider migrating assets to a new wallet if compromise is suspected.