leadger-live-desktop-nice[.]pages[.]dev
“Ledger Live Desktop - Secure Crypto Portfolio & Wallet App”
Observação armazenada
Contraste de títulos observado
Resumo das evidências
PhishDestroy identifies leadger-live-desktop-nice.pages.dev as an active crypto drainer phishing domain under investigation, masquerading as the legitimate Ledger Live desktop application. This domain employs a high-fidelity impersonation of the official software interface to deceive users into downloading malicious binaries designed to siphon cryptocurrency assets directly from wallets. The threat is currently classified as active with an under-investigation risk level, indicating preliminary confirmation of malicious intent but pending deeper forensic analysis to fully map the kill chain and associated infrastructure.
This domain was flagged with the following technical indicators: the SSL certificate is issued by Google Trust Services, the domain is registered through Cloudflare, Inc., and it resolves to IP address 188.114.97.3. At the time of analysis, the domain shows zero detections out of 95 VirusTotal engines, suggesting it remains undetected by most antivirus and threat intelligence platforms. The use of Cloudflare as a registrar and Google Trust Services for SSL issuance adds a veneer of legitimacy that may help the domain evade browser-based security warnings and user scrutiny. However, the lack of historical blocklist entries and low detection rate signals a potentially emergent or rapidly evolving campaign targeting cryptocurrency users.
To mitigate exposure to this crypto drainer threat, users are strongly advised to avoid downloading any software from this domain or any untrusted third-party sources claiming to be Ledger Live. Always download applications directly from the official Ledger website (ledger.com) or verified app stores. Enable hardware wallet security features such as passphrase protection and verify firmware integrity before transferring funds. Monitor wallet addresses for unauthorized transactions and report any suspicious activity immediately to your security team or wallet provider. Consider deploying DNS filtering rules to block resolution of this domain (leadger-live-desktop-nice.pages.dev) and similar typosquatting variants. Additionally, maintain endpoint detection and response (EDR) solutions capable of behavioral analysis to detect anomalous wallet activity or unauthorized data exfiltration.
Data Coverage
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 12/08/2026
10 fontes externas monitoradas Sem correspondência
Tecnologias
3 tecnologias identificadas com alta confiança
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of leadger-live-desktop-nice.pages.dev · checked Apr 27, 2026
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo