desk-tup-ledger[.]pages[.]dev

This domain, desk-tup-ledger.pages.dev, poses a significant threat as it impersonates the ledger brand, specifically mimicking the Ledger Live Desktop page. The threat is classified as brand impersonation, which can lead to users being tricked into providing sensitive information such as login credentials or private keys. This impersonation could result in financial loss and compromise of user accounts.

Analysis indicates that the domain is flagged by 13 out of 95 security vendors on VirusTotal, which is a noteworthy detection rate suggesting a high level of suspicion. The domain was registered through Cloudflare, Inc., and created on April 30, 2026. It appears on one security blocklist and has a Gridinsoft trust score of 0/100, indicating a complete lack of trust in the domain's legitimacy. The domain resolves to the IP address 172.66.44.184 and employs technologies such as HSTS, Cloudflare, and HTTP/3, which are often used by attackers to enhance the credibility and resilience of their phishing infrastructure.

If users have visited this domain, they should immediately check their accounts for any unauthorized activity. It is recommended to change login credentials and private keys, and to perform a thorough scan of their devices for malware. Users should also report any suspicious activity to Ledger's official support channels and avoid interacting with any links or forms on this domain or similar suspicious pages.