en-desktop-ledgrelive[.]weebly[.]com

This domain, en-desktop-ledgrelive.weebly.com, has been assessed with an elevated risk level due to its specific threat type of brand impersonation targeting the cryptocurrency hardware wallet company Ledger. PhishDestroy identified this as a convincing fake of the legitimate Ledger Live Desktop software page, designed to deceive users into divulging sensitive information or installing malware. The domain is now offline, but its prior activity posed a significant risk to Ledger customers.

VirusTotal analysis shows that 17 out of 95 security vendors flagged this domain as malicious, indicating broad consensus among security tools. The domain was registered through MarkMonitor Inc. and created on April 27, 2026, suggesting a relatively recent setup. It resolved to IP address 74.115.51.9 and utilized an SSL certificate from Let's Encrypt (E8), which added a veneer of legitimacy. The domain also appeared on one security blocklist, and its page title explicitly claimed to be the "Ledger Live Desktop — Official Software for Hardware Wallet Users," a clear attempt to mislead visitors. PhishDestroy's trust score reflects the elevated risk based on these technical indicators.

Users who may have encountered this domain should immediately change any Ledger-related passwords and enable two-factor authentication on their accounts. It is also advisable to run a full security scan on any devices that accessed the site to check for potential malware. Ledger users should always verify they are on the official domain (ledger.com) before downloading software or entering credentials. Reporting the domain to relevant authorities and blocklists can help prevent future victims. PhishDestroy continues to monitor for similar threats and urges caution with any unsolicited communications referencing Ledger products.