eng-live--desktop[.]pages[.]dev

The domain eng-live--desktop.pages.dev was identified as a brand impersonation threat targeting Ledger users. This phishing domain masquerades as the official Ledger Live Desktop platform, displaying the title 'Ledger Live Desktop® | Manage Your Crypto™ Assets Safely' to deceive victims into entering sensitive credentials or private keys. The threat type is brand impersonation, specifically designed to harvest cryptocurrency wallet information.

Technical indicators reveal that the domain resolves to IP address 172.66.44.96 and was registered through Cloudflare, Inc. on September 10, 2025. VirusTotal analysis shows only 1 out of 95 security vendors flagging this domain, indicating low initial detection. The SSL certificate is issued by Google Trust Services (WE1), and the domain appears on 1 security blocklist. Google Safe Browsing status is not explicitly listed but is implied by the low blocklist count.

The domain is currently offline, having been taken down following detection. While the immediate threat is neutralized, users who may have interacted with the site before takedown should consider their devices compromised. PhishDestroy recommends that anyone who visited eng-live--desktop.pages.dev change their Ledger Live passwords and enable two-factor authentication immediately. No drainer kit was identified in the available intelligence, but the impersonation of a high-value crypto brand like Ledger carries significant risk of asset theft. Users should always verify URLs directly through official channels and avoid clicking links in unsolicited messages.