leger-livedesktop-click[.]pages[.]dev

PhishDestroy identifies leger-livedesktop-click.pages.dev as an active phishing domain impersonating Ledger Live Desktop, a popular cryptocurrency wallet software. This fraudulent site attempts to deceive users into downloading malicious software under the guise of an official application update or installer. The domain remains unblocked and accessible as of the latest assessment, posing an immediate threat to cryptocurrency holders utilizing Ledger devices.

This domain was flagged by 1 of 95 VirusTotal vendors, indicating it has not yet been widely recognized as malicious. It resolves to IP address 172.66.47.77 and is registered through Cloudflare, Inc. The SSL certificate is issued by Google Trust Services, which may contribute to a misleading appearance of legitimacy. The domain is hosted on Cloudflare Pages, a legitimate service often abused by threat actors to rapidly deploy phishing infrastructure. While the creation date is not specified in available data, its active status and absence from blocklists suggest recent deployment.

Users should immediately avoid interacting withleger-livedesktop-click.pages.dev and verify any Ledger Live Desktop downloads exclusively from the official website at ledger.com. If you have visited this domain, cease interaction immediately, scan your device for malware using reputable antivirus software, and consider transferring funds to a new wallet if credentials were entered. Report this domain to your antivirus provider and browser vendor to aid in future detections. For comprehensive protection, enable multi-factor authentication on all cryptocurrency accounts and maintain offline backups of wallet recovery phrases.