desk-live-ledgs[.]pages[.]dev

PhishDestroy identifies desk-live-ledgs.pages.dev as an active crypto drainer impersonating Ledger to steal cryptocurrency. This fraudulent site masquerades as the official Ledger Live Desktop application, using misspelled variations of the brand name (Ledgér, Lédger) in its page title to deceive visitors into downloading malicious software. Visitors are tricked into connecting their crypto wallets, where a hidden crypto drainer silently transfers funds to the attacker’s wallet without consent. This domain represents a critical threat to cryptocurrency users who may inadvertently expose their private keys or seed phrases. This domain was flagged with 0 detections out of 95 VirusTotal scans, indicating it has evaded detection by most antivirus engines. The site resolves to IP address 188.114.97.3 and uses a Google Trust Services SSL certificate, which adds false legitimacy to the scam. It is hosted on Cloudflare Pages and remains actively online as of the latest investigation. The page title deliberately mimics official Ledger branding, leveraging misspellings to bypass basic filters. Despite its low detection rate, the site’s behavior aligns with known crypto drainer tactics observed in recent campaigns targeting Ledger users. If you visited desk-live-ledgs.pages.dev, disconnect your wallet immediately and revoke any connected permissions through your wallet’s settings. Do not enter any seed phrases or private keys on this site. Run a full antivirus scan and consider transferring remaining funds to a new, secure wallet. Report the domain to Ledger’s official support and to platforms like Google Safe Browsing or PhishTank to help block future access. Always verify website URLs and use only official Ledger domains (ledger.com) for downloads and support.