co-ledger-desk[.]pages[.]dev

The domain co-ledger-desk.pages.dev is classified as a high-risk brand impersonation threat targeting Ledger, a well-known cryptocurrency hardware wallet provider. The domain attempts to deceive users into believing it is an official platform, as evidenced by its page title 'Ledger Live Desktop – Secure Crypto Login'. No specific drainer kit appears to be associated with this threat currently.

Technical indicators reveal that this domain was created on April 02, 2026, and is registered through Cloudflare Pages. It has an IP address of 188.114.97.3, which is located in Canada under Cloudflare, Inc. According to VirusTotal, the domain has a low detection rate with a score of 1/95, indicating that very few security vendors have flagged it. Additionally, the domain is listed on one security blocklist, specifically PhishDestroy, highlighting its malicious intent. The domain remains active with ongoing risks for potential victims.

Current status assessments indicate that co-ledger-desk.pages.dev is still active and operational. Users should exercise extreme caution and avoid interacting with this domain. Organizations should implement internal measures to block access to this domain, and users are advised to verify the authenticity of any communications purporting to come from Ledger. Regular monitoring and reporting to security teams are essential to mitigate risks associated with such impersonation threats.