ledgerlive-desk-top[.]pages[.]dev

On July 23, 2026, the domain ledgerlive-desk-top.pages.dev was confirmed to be involved in a crypto scam impersonating the brand Ledger. The domain was created on March 23, 2026, and has since been taken offline. Analysis indicates that the domain was flagged by 14 out of 94 security vendors on VirusTotal, suggesting a moderate level of malicious activity. The domain is currently blocked by PhishDestroy, and it appears on one security blocklist, further reinforcing its status as a threat.

The page title found was 'ledger login,' which aligns with the impersonation of the Ledger brand. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, which is located in California, USA, and is associated with CloudFlare, Inc. The SSL certificate is issued by Google Trust Services, and the domain employs technologies such as HSTS, Cloudflare, and HTTP/3. The Gridinsoft trust score for this domain is 0 out of 100, indicating a complete lack of trust.

The HTTP status code 403 suggests that the domain is currently inaccessible, possibly due to it being taken offline. Defenders should be vigilant and ensure that this domain remains blocked in their security systems to prevent any potential reactivation or further malicious activity. Additionally, users should be educated to recognize and avoid such impersonation attempts, especially when dealing with financial and crypto-related services.