desktopp-ledgerlive[.]pages[.]dev

PhishDestroy has identified desktopp-ledgerlive.pages.dev as an active brand impersonation threat specifically targeting Ledger cryptocurrency users. This domain is currently live and posing as a trusted platform for managing digital assets, with the page title 'Ledger Live Desktop – Trusted Crypto Portfolio Management' designed to deceive visitors into believing they are on an official Ledger service. The threat type is a crypto drainer, meaning its primary goal is to steal cryptocurrency by tricking users into connecting their wallets or entering sensitive information.

Technical analysis reveals several concerning indicators. The domain was registered on April 17, 2026, through Cloudflare, Inc., and resolves to IP address 172.66.44.96. It uses an SSL certificate from Google Trust Services / WE1, which gives a false sense of security. On VirusTotal, 12 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. These data points underscore the high risk associated with this site.

As of now, desktopp-ledgerlive.pages.dev remains active and continues to pose a credible threat to anyone who may encounter it. PhishDestroy strongly advises users to avoid visiting this domain under any circumstances. If you have already interacted with this site, take immediate steps to secure your crypto assets, such as revoking any permissions granted and moving funds to a new wallet. Always verify the authenticity of any Ledger-related service by checking official channels and using PhishDestroy’s verification tools before connecting your wallet or entering credentials.