ledger[.]com-desktop[.]com

The domain ledger.com-desktop.com was registered on 21 February 2026 and is presently hosted on the Cloudflare network (AS13335) with the address 104.21.60.17 located in the United States. The TLS certificate presented by the server is identified as WE1, indicating a valid SSL handshake but offering no indication of legitimacy. The site’s HTML title reads “Ledger Live : Most Trusted & Secure – Connect Your Ledger”, directly referencing the Ledger brand and suggesting an attempt to masquerade as an official Ledger Live portal. Classification from the supplied intelligence tags the activity as a “Crypto Scam” and the domain is listed as an impersonation of the Ledger brand.

Observational data show that the domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. Reputation scoring from Gridinsoft assigns a score of 0 out of 100, reflecting an extremely low trust rating. VirusTotal analysis reports that seven out of ninety‑three scanners flagged the domain, reinforcing the suspicion of malicious intent. The domain’s current HTTP status is offline, which limits real‑time verification of payloads or credential‑stealing forms, but the historical evidence is sufficient to consider the infrastructure as hostile.

Defenders should treat any traffic to ledger.com-desktop.com as malicious. Network‑level blocks should be applied at the DNS and IP layers, and intrusion‑prevention signatures that reference the domain name or its associated IP should be updated. Because the domain leverages a widely trusted CDN provider, additional scrutiny of Cloudflare‑hosted sub‑domains associated with Ledger‑related keywords is advisable. Continuous monitoring of the domain’s registration and any re‑activation attempts is recommended, as threat actors often recycle similar naming patterns after takedown.