public-desk-live[.]pages[.]dev

This domain, public-desk-live.pages.dev, poses a specific threat of brand impersonation, targeting the cryptocurrency management brand Ledger. The domain mimics the official Ledger Live desktop application, potentially misleading users into believing they are interacting with a legitimate service. This impersonation can lead to the theft of sensitive information such as login credentials, private keys, and other personal data, posing a significant risk to users' financial security.

Analysis indicates that public-desk-live.pages.dev has been flagged by 9 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection but also indicating that it may still evade some security systems. The domain is registered through Cloudflare, Inc. and was created on March 23, 2026. It resolves to the IP address 188.114.96.3, which is located in California, USA, and is associated with Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1, which can add a layer of trust for unsuspecting users. The domain appears on one security blocklist, and it is currently blocked by PhishDestroy, a known security service.

If users have visited public-desk-live.pages.dev, they should immediately check their accounts for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) for all cryptocurrency wallets and related services. Users should also report any suspicious activity to their financial institutions and to the official Ledger support channels. To avoid future risks, users should only access the official Ledger Live application through verified links and should verify the URL and SSL certificate before entering any sensitive information.