# home-ledger-live-desktop.pages.dev — MALICIOUS

> home-ledger-live-desktop.pages.dev is a brand impersonation site flagged by 10/95 VirusTotal scanners. This counterfeit Ledger portal threatens crypto users.

## Summary
home-ledger-live-desktop.pages.dev is a fraudulent website designed to mimic the official Ledger Live Desktop application interface. The page leverages visual deception—such as copied logos, layout, and language—to trick visitors into entering recovery phrases, seed phrases, or private keys, which are then harvested by attackers. Once obtained, these credentials can be used to drain cryptocurrency wallets directly. This is not generic phishing; it is a targeted brand impersonation designed specifically for cryptocurrency theft.  PhishDestroy identifies this domain as actively impersonating Ledger. Security assessments reveal that 10 out of 95 VirusTotal security vendors have flagged the domain as malicious, indicating elevated risk. The domain was registered through Cloudflare, Inc., and resolves to IP address 172.66.47.156. Despite using a Google Trust Services SSL certificate, the presence of multiple security alerts strongly suggests illegitimate intent. The site's deceptive naming (using 'ledger' and 'live') aims to exploit user trust in a leading hardware wallet brand.  If you visited home-ledger-live-desktop.pages.dev, do not enter any credentials, download any software, or click any prompts. Immediately close the browser tab and clear your browser’s cache and cookies. If you entered a seed phrase or recovery key, assume it has been compromised—transfer any remaining assets to a new, secure wallet immediately and revoke access to compromised addresses. Scan your devices with updated antivirus software and consider enabling two-factor authentication where possible. Report the domain to Ledger’s official support and to your local cybercrime unit to help prevent further abuse. Staying alert to mismatched URLs and unexpected download prompts is essential in protecting your digital assets.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.156

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9e4c04bb-a254-4415-817f-8e20014f0664
- PhishDestroy: https://phishdestroy.io/domain/home-ledger-live-desktop.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/home-ledger-live-desktop.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/home-ledger-live-desktop.pages.dev/
Last updated: 2026-03-22