# ledger-live-desktop-us-en.pages.dev — SUSPICIOUS > ledger-live-desktop-us-en.pages.dev is a fake Ledger login page flagged by 2/95 VirusTotal vendors as a crypto drainer. Verify safety on PhishDestroy. ## Summary PhishDestroy identifies ledger-live-desktop-us-en.pages.dev as an active crypto drainer impersonating the official Ledger Live Desktop app. This domain was flagged by 2 out of 95 VirusTotal security vendors within hours of its registration via Cloudflare on February 2024. The site uses a Google Trust Services SSL certificate and resolves to IP 188.114.97.3 to appear legitimate, but its sole purpose is to steal cryptocurrency wallet credentials or seed phrases. If you visited this page, disconnect any connected wallets immediately, revoke permissions in your wallet settings, and run a malware scan. Do not enter any sensitive information. Report the domain to PhishDestroy and your wallet provider to help protect others from this threat. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) - Target brand: Ledger ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 188.114.97.3 ## Detection Status - VirusTotal: 2 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/ddd08517-7e0c-44ab-a37c-f35fd877a691 - PhishDestroy: https://phishdestroy.io/domain/ledger-live-desktop-us-en.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/ledger-live-desktop-us-en.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/ledger-live-desktop-us-en.pages.dev/ Last updated: 2026-03-26