desktop--live-ledggr[.]pages[.]dev

PhishDestroy identifies desktop--live-ledggr.pages.dev as an active phishing domain impersonating Ledger Live, a legitimate cryptocurrency wallet service. This malicious site specifically targets users by replicating the official Ledger login interface to harvest wallet credentials and private keys. Security analysts confirm the domain is part of a broader campaign designed to deceive cryptocurrency holders into surrendering access to their digital assets under the guise of routine account verification.

This domain was flagged with zero detections on VirusTotal out of 95 security vendor scans, indicating it currently evades detection mechanisms. It was registered through Cloudflare, Inc., resolving to IP address 188.114.97.3 with a Google Trust Services SSL certificate—common tactics used to appear legitimate. The domain’s structure, including the double hyphen and inclusion of 'live' in the subdomain, mirrors known phishing patterns targeting Ledger users. While the exact registration date is not provided, the domain remains active and accessible, posing ongoing risk to unsuspecting visitors.

If you visited desktop--live-ledggr.pages.dev, immediately cease any interaction with the site and do not enter any credentials or personal information. Disconnect from the network to prevent potential malware delivery. Check your cryptocurrency wallets for unauthorized transactions and revoke any exposed API keys or permissions. Report the domain to your browser’s safe browsing tools and consider using a reputable ad-blocker or DNS filter to block similar threats. Monitor financial accounts closely and enable multi-factor authentication where available to mitigate further risk.