# ledjer-live-desktop-en.pages.dev — SUSPICIOUS

> ledjer-live-desktop-en.pages.dev is a crypto drainer that mimics Ledger Live Desktop. Only 1 of 95 VirusTotal scanners caught it.

## Summary
PhishDestroy identifies ledjer-live-desktop-en.pages.dev as an active crypto-drainer site posing as the legitimate Ledger Live Desktop client. Visitors are tricked into connecting crypto wallets, and any assets or NFTs are drained within seconds of signature approval. Security vendors widely miss this threat; VirusTotal shows only 1 out of 95 engines flagging the domain, so manual screening on PhishDestroy is essential before any interaction.  This domain was flagged at seed b7c134 and quickly registered through Cloudflare, Inc. using a Google Trust Services SSL certificate to mimic the genuine Ledger domain. Its infrastructure resolves to IP 188.114.96.3 (ASN 13335) and was first detected within the last 72 hours, confirming a fresh campaign aimed at Ledger users.  If you visited ledjer-live-desktop-en.pages.dev, disconnect your wallet immediately via the wallet’s “disconnect” or “revoke” feature, then scan your device with updated antivirus and malware removers. Revoke any wallet permissions you may have granted through tools like revoke.cash or Phantom’s “Connected Apps.” Report the domain to PhishDestroy so others are warned, and avoid future visits by bookmarking only the official Ledger website (ledger.com) and verified app stores.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9a5fdbc0-3d08-4c83-b9a9-ba4174b895cf
- PhishDestroy: https://phishdestroy.io/domain/ledjer-live-desktop-en.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledjer-live-desktop-en.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledjer-live-desktop-en.pages.dev/
Last updated: 2026-03-23