liveledger--desktop[.]pages[.]dev

The domain liveledger--desktop.pages.dev is flagged as a high-risk brand impersonation threat targeting the brand Ledger. This domain impersonates the official Ledger Live Desktop application and may attempt to steal sensitive information from users, such as login credentials and private keys.

Analysis indicates that the domain was registered on April 11, 2026, through Cloudflare, Inc. It currently resolves to the IP address 188.114.97.3, which is located in California, USA, and is associated with CloudFlare, Inc. The SSL certificate is issued by Google Trust Services / WE1. According to VirusTotal, 2 out of 95 security vendors have flagged this domain as malicious. Additionally, the domain appears on 1 security blocklist, indicating a higher level of suspicion and risk. The domain is also blocked by PhishDestroy, a known security service.

Users who have visited this domain are advised to immediately change their passwords and private keys associated with Ledger and any other cryptocurrency wallets. It is recommended to run a comprehensive security scan on any devices used to access the site to detect and remove potential malware. Users should also report the incident to their financial institutions and monitor their accounts for any unauthorized activity.