secure-ldgor-desktop[.]pages[.]dev

This domain, secure-ldgor-desktop.pages.dev, is a sophisticated phishing site that impersonates Ledger, a popular cryptocurrency hardware wallet company. The site poses as a Ledger Live Desktop guide, tricking users into entering their recovery phrases or private keys. Once obtained, attackers can drain the victim's cryptocurrency wallets completely. This is not just a generic phishing page; it's a targeted crypto drainer designed to steal digital assets from Ledger users.

PhishDestroy's analysis reveals strong indicators of malicious intent. VirusTotal flagged the domain with 13 out of 95 security vendors marking it as malicious, a high detection rate. The domain was created on April 3, 2026, and is still active, hosted on Cloudflare's infrastructure at IP 188.114.96.3. The SSL certificate is issued by Google Trust Services, which can give a false sense of security to unsuspecting visitors. The page title explicitly mentions "Ledger Live Desktop" and "Secure Crypto Device," closely mimicking official branding. It also appears on at least one security blocklist, further confirming its dangerous nature.

If you have visited this site, do not enter any information. Immediately disconnect your device from the internet and run a full security scan. If you entered your Ledger recovery phrase, assume your funds are compromised and transfer them to a new, secure wallet generated offline. Change all passwords and enable two-factor authentication on associated accounts. Report the domain to your email provider and consider freezing your credit. PhishDestroy recommends always typing the official URL directly into your browser and enabling phishing protection extensions to avoid such threats in the future.