# ledgerlivedesktos.pages.dev — SUSPICIOUS

> Disguised as a Ledger Live desktop tool, ledgerlivedesktos.pages.dev pushes counterfeit software. 1 of 95 scanners on VirusTotal already recognises it as.

## Summary
LedgerLiveDesktop.pages.dev has been identified as an active brand-impersonation site targeting users of the Ledger hardware wallet ecosystem. The domain masquerades as an official desktop application portal, aiming to trick visitors into downloading counterfeit software that can steal recovery phrases or private keys.

PhishDestroy’s analysis reveals this domain resolves to IP 172.66.47.198 via Cloudflare and benefits from a Google Trust Services SSL certificate to appear legitimate. Only 1 out of 95 VirusTotal security vendors already flag it, indicating low detection coverage despite clear malicious intent. The site is hosted on Cloudflare Pages and presents itself as a “Ledger Live Desktop” installer, exploiting typographical confusion to bypass suspicion.

Users should immediately cease any interaction with ledgerlivedesktos.pages.dev and avoid downloading files advertised through this domain. Always obtain Ledger software exclusively from ledger.com or official app stores. Report the domain to your security team and consider blocking 172.66.47.198 at the network perimeter. Enable Ledger’s built-in application verification features to confirm authenticity before installation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.198

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4b0428fe-65d7-4b14-9ff3-10d66686929d
- PhishDestroy: https://phishdestroy.io/domain/ledgerlivedesktos.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledgerlivedesktos.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledgerlivedesktos.pages.dev/
Last updated: 2026-03-22