ledger-get-live-desktop-eii[.]pages[.]dev

This domain was designed to impersonate Ledger Live, a legitimate cryptocurrency wallet management platform. The site presented itself as the official Ledger Live Desktop application, using identical branding, page titles, and interface elements to deceive users into entering sensitive credentials or installing malicious software. Such impersonation typically aims to steal cryptocurrency wallet recovery phrases, private keys, or login details, leading to unauthorized access and asset theft. Analysis indicates the domain was created on April 13, 2026, and registered through Cloudflare, Inc. It resolved to the IP address 188.114.96.3 and used a Google Trust Services SSL certificate, adding a false sense of legitimacy. Despite its sophisticated appearance, the domain had zero detections on VirusTotal out of 95 engines at the time of assessment, suggesting it had not yet been widely identified as malicious. It was detected on one security blocklist and employed technologies such as HSTS and HTTP/3, which are also used by legitimate services to enhance security. If you visited ledger-get-live-desktop-eii.pages.dev, immediately disconnect the device from the internet to prevent potential data exfiltration. Do not enter any credentials or download any files from the site. Check for unauthorized transactions in all connected cryptocurrency wallets and revoke access to any suspicious applications linked to your accounts. Reset passwords and recovery phrases for all crypto wallets, using a secure, offline device. Monitor financial and account activity for signs of compromise and report the incident to relevant security teams or platforms.