dsktop-ledgr[.]pages[.]dev

The domain dsktop-ledgr.pages.dev is a phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It presented itself as the 'Ledger Live Desktop | Official Crypto Wallet App' to deceive users into entering sensitive credentials or downloading malicious software. No drainer kit was detected, but the site posed an elevated risk due to its convincing mimicry of the legitimate Ledger platform. As of the latest verification, dsktop-ledgr.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of dsktop-ledgr.pages.dev. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ESET and Fortinet, and appeared on 1 security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on March 24, 2026, it resolved to the IP address 188.114.97.3, hosted by Cloudflare in Canada. The SSL certificate was issued by Google Trust Services / WE1, and the site employed technologies such as HSTS, Cloudflare, and HTTP/3. At the time of analysis, the domain returned an HTTP 403 status, indicating it was no longer accessible.

Users who interacted with dsktop-ledgr.pages.dev should immediately change any credentials entered on the site and enable two-factor authentication (2FA) on their Ledger or other cryptocurrency accounts. Monitor accounts for unauthorized transactions and consider revoking any token approvals if wallet connections were made. Report the phishing domain to Ledger’s official security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.