welt-lader-live-desktop[.]pages[.]dev

This domain, welt-lader-live-desktop.pages.dev, poses as an official Ledger Live Desktop download portal to distribute malicious software. Analysis indicates it targets cryptocurrency users by mimicking the legitimate Ledger interface, potentially leading to credential theft, wallet compromise, or unauthorized transactions. The site presents itself as a "Complete Guide, Secure Setup" for Ledger Live, increasing the likelihood of user engagement through social engineering tactics. Infrastructure analysis reveals the domain was registered on March 23, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. Security validation shows 10 out of 95 vendors on VirusTotal flag the domain as malicious, and it appears on one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as the domain remains a confirmed brand impersonation threat. Users who visited welt-lader-live-desktop.pages.dev should immediately disconnect affected devices from networks and cease any interaction with the site. Scan systems with updated security tools to detect potential malware. If credentials or wallet information were entered, revoke access, transfer assets to new secure wallets, and monitor accounts for unauthorized activity. Report the incident to relevant security teams for further mitigation.