ledger-li-ve-desk-top-us[.]pages[.]dev

PhishDestroy’s automated scans flagged ledger-li-ve-desk-top-us.pages.dev as a fraudulent desktop client designed to mimic Ledger’s official software interface and steal cryptocurrency wallet credentials. The site uses a convincing visual copy of Ledger Live to trick visitors into entering their recovery phrases or seed words. Once entered, the credentials are collected by the attackers and used to drain wallets directly. This domain was flagged on edbe3c after it showed zero detections out of 95 VirusTotal engines, indicating it is currently undetected by many antivirus tools. It resolves to IP 188.114.96.3, was registered through Cloudflare on an unknown date, and uses a Google Trust Services SSL certificate to appear legitimate. All evidence points to an active brand impersonation campaign targeting Ledger users. If you visited ledger-li-ve-desk-top-us.pages.dev, assume your credentials or wallet data may have been compromised. Disconnect any connected wallets immediately, revoke access permissions in your wallet settings, and transfer remaining funds to a newly generated wallet using official Ledger software downloaded only from ledger.com. Change all passwords used on the fake site and enable two-factor authentication where available. Report the incident to Ledger support and consider informing your email provider of a potential phishing campaign targeting you.