# desk-top-ledgr.pages.dev — SUSPICIOUS > desk-top-ledgr.pages.dev is a crypto-drainer impersonating Ledger Live Desktop. 0/95 VirusTotal detections as of today; stop here and verify on PhishDestroy. ## Summary PhishDestroy identifies desk-top-ledgr.pages.dev as a live impersonation site that masquerades as the official Ledger Live Desktop app to trick visitors into entering wallet credentials or signing malicious transactions. The page title “Ledger Live Desktop – Secure Crypto Management” is copied directly from Ledger’s legitimate site, and the domain is registered through Cloudflare to obscure its true hosting origin. At this moment the site remains active, resolves to IP 172.66.47.99, and carries a Google Trust Services SSL certificate to appear trustworthy, yet its sole purpose is to drain cryptocurrency from unwary users. This domain was flagged by PhishDestroy on seed 747385 after scanning revealed zero detections out of 95 VirusTotal engines, meaning antivirus suites currently miss the threat. The site was built on Cloudflare Pages and first observed on an unknown date, but it remains online as of today. The combination of a lifted page title, Cloudflare hosting, and a clean VT score makes it an especially deceptive trap for crypto holders searching for legitimate Ledger software. If you visited desk-top-ledgr.pages.dev, assume your seed phrase or private keys may have been exposed. Immediately revoke any connected wallet permissions using a clean device, move remaining funds to a newly created wallet, and scan your system with Malwarebytes and Windows Defender offline scans. Report the domain to PhishDestroy for takedown and monitor your transaction history for any unauthorized transfers. Always download Ledger Live directly from ledger.com and verify the publisher’s certificate before installation. ## Threat Details - Verdict: SUSPICIOUS - Site status: alive (HTTP ?) - Target brand: Ledger - Page title: Ledger Live Desktop - Secure Crypto Management ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.47.99 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/3bc27b6e-c0e4-4ca9-9573-45d618cdc4e2 - PhishDestroy: https://phishdestroy.io/domain/desk-top-ledgr.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/desk-top-ledgr.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/desk-top-ledgr.pages.dev/ Last updated: 2026-04-13