lledger-llive-desktopp[.]pages[.]dev

This domain, lledger-llive-desktopp.pages.dev, is flagged for brand impersonation targeting Ledger. Analysis indicates that the site was designed to deceive users into believing they were interacting with official Ledger services. The primary threat posed by this domain is the potential for credential theft, as users might be tricked into entering sensitive information such as usernames, passwords, and other personal details on a fraudulent page.

Evidence gathered from various sources includes a VirusTotal detection score of 0/95, indicating that the domain has not yet been flagged by most antivirus engines. However, the domain's trust score from Gridinsoft is 0/100, a clear indicator of potential malicious intent. The domain was created on April 04, 2026, and is registered through Cloudflare, Inc. It resolves to the IP address 172.66.47.23 and was using an SSL certificate from Google Trust Services. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The page title 'Suspected phishing site | Cloudflare' further corroborates the suspicion.

If users have visited this domain, they are advised to immediately change any passwords or sensitive information they may have entered on the site. Additionally, users should monitor their accounts for any unauthorized activity and consider enabling multi-factor authentication (MFA) for added security. Reporting the incident to Ledger's official customer support and to the relevant authorities is also recommended to help prevent further misuse.