DANGEROUS

Tech-support scam — do not call

14 of 92 antivirus engines flag this page as malicious. Microsoft, Apple, and your ISP never call or pop up to ask for remote access or payment. Don't call any numbers shown, don't install "support" tools, and close the page — ideally by ending the browser process.

Security Review

Is ledger-live-desktoop.pages.dev legit or a scam?

Our verdict:Dangerous· 1/100

Typosquat clone of Ledger Live Desktop on a brand-new 0-day domain already flagged as phishing by BitDefender, Fortinet and five other engines.

ledger-live-desktoop.pages.devScanned 2d ago
0
Trust score
DANGEROUS
Heuristics 0·MT 12
Category tags
tech-support-scam#Tech Support Scam#Clone Site#Crypto Fraud92% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
Engines flagged this URL
Domain Age
0 days old
Registration date unknown
MT Intelligence
Dangerous
Critical likelihood · 92% confidence

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust12/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The page title and content directly copy Ledger's official desktop app marketing while hosted on ledger-live-desktoop.pages.dev, a deliberate misspelling of the real product name. Our antivirus network returned 14 malicious and phishing detections from engines including BitDefender, Emsisoft, Fortinet and G-Data. The domain was registered today, shows no business registration, and belongs to a known pattern of similar *.pages.dev subdomains used for Ledger phishing. The evidence package confirms it is a documented clone of ledger.com with no legitimate contact details or postal address. These combined signals indicate a high-intent credential-harvesting or malware distribution site.
Full dossier
Analysis complete

Page Content

The site presents itself as the official Ledger Live Desktop download page with testimonials, feature lists and setup instructions that mirror Ledger's own marketing language. No functional download buttons lead to the real app; the page instead pushes users toward unverified sources.

Infrastructure

Hosted on Cloudflare Pages at IP 172.66.44.161 with valid SSL but zero abuse history on the IP itself. The domain is a fresh subdomain with no prior traffic index or established reputation.

Domain History

WHOIS shows the domain was created 0 days ago with privacy protection disabled. No business registration exists for this subdomain.

Web Reputation

Our research found zero direct mentions of this exact domain, but multiple nearly identical *.pages.dev domains have been flagged as Ledger phishing sites hosting crypto-draining malware. Official Ledger documentation warns users to download only from ledger.com or shop.ledger.com.

Risk Factors
6
  • Domain created today with no business registration or history
  • 14 malware engines flag the page as phishing or malicious
  • Exact impersonation of Ledger Live Desktop including copied marketing text
  • Typo in the domain name (desktoop instead of desktop)
  • No legitimate contact email, phone or postal address on the page
  • Part of a cluster of similar fake Ledger domains on the same platform
Positive Signals
2
  • SSL certificate is currently valid
  • No redirects to other suspicious domains
AI Recommendation
Close the page immediately and only download Ledger Live from the official ledger.com or shop.ledger.com websites. Never use links from search results or unsolicited messages.
Scam network detected
1 linked domain correlated

Evidence confirms this site is a clone of ledger.com and a typosquat of the official domain. Domain is only 0 days old and already carries multiple network-level red flags.

ledger.com
Next-gen fraud intelligence
Evidence-backedCross-checked

Website Preview

Screenshot of ledger-live-desktoop.pages.dev
LIVE RENDER
ledger-live-desktoop.pages.dev

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for ledger-live-desktoop.pages.dev, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
0 days
Brand-new domains are higher-risk by default.
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Clones ledger.com
The page impersonates a well-known brand's site.
Typosquat check
Typosquat of ledger.com
Deliberate misspelling of a real brand's domain.
Web mentions
No scam reports found
No complaints, no negative coverage turned up in our sweep.
Key findings
7 headline facts from open-web research
  • Domain age listed as 0 days
  • Page title exactly: "Ledger Live Desktop | Official App for PC & Mac"
  • Page description: "Download Ledger Live Desktop to manage your crypto securely on Windows, Mac, and Linux. Official guide and full setup tutorial included."
  • No direct search results or mentions found for exact domain ledger-live-desktoop.pages.dev
  • Multiple similar *.pages.dev domains (e.g., ute-ledger-live-desktop.pages.dev, ledger-live-desktop-welcome.pages.dev) flagged as phishing sites impersonating Ledger and hosting crypto-draining malware
  • Official Ledger Wallet/Live downloads only available from shop.ledger.com or ledger.com per Ledger support pages
  • Ledger.com maintains active phishing campaign status page warning about fake Ledger Live apps and sites
Impersonation / typosquat
Typosquat of ledger.com

Domain name 'ledger-live-desktoop.pages.dev' closely mimics 'ledger-live-desktop' with typo; page title and description impersonate official Ledger Live Desktop app

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
We searched scam-report databases, consumer-review sites, and general web sources for ledger-live-desktoop.pages.dev and didn't find scam reports or complaints. For a new or low-traffic site this is expected and is not by itself a sign of trust.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Critical cluster

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (3)
  • Evidence confirms this site is a clone of ledger.com.
  • Domain is a typosquat of ledger.com.
  • Domain is only 0 days old and already carries multiple network-level red flags.
Linked signals (2)
Clone of ledger.comTyposquat of ledger.com

Antivirus Engines

Detection matrix · live
15 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

14Malicious1Suspicious47Harmless92Engines
0
of 92
ADMINUSLabs
Malicious· malicious
alphaMountain.ai
Malicious· phishing
BitDefender
Malicious· phishing
Emsisoft
Malicious· phishing
Fortinet
Malicious· phishing
G-Data
Malicious· phishing
Kaspersky
Malicious· phishing
LevelBlue
Malicious· phishing
Lionic
Malicious· phishing
Netcraft
Malicious· malicious
Rising
Malicious· phishing
Sophos
Malicious· phishing
VIPRE
Malicious· phishing
Webroot
Malicious· malicious
ESET
Suspicious· suspicious

15 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
Has contact info, but not on the site's domain
Emails on site's domainNone
Phone numbers+1 800-123-4567
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No email uses the site's own domain — legitimate shops usually do.
  • No postal address visible on the page.
  • Page impersonates Ledger on a non-official domain.
  • Scam family match: Tech-Support Scam.
  • Phone number listed (+1 800-123-4567).

Domain & Encryption

Domain History
Age0 days old
RegistrarHidden
RegisteredUnknown
ExpiresUnknown
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 11, 2026 (69d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://ledger-live-desktoop.pages.dev/
  • 2200https://ledger-live-desktoop.pages.dev/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file3
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Scam-Type Likelihood

4 scam-type patterns detected
Scam-Type Likelihood

0 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Tech Support Scam
Tech Support Scam
High likelihood
0/100
  • Classic tech-support scare copy found (fake Microsoft/Apple alert, remote-access instructions).
  • Primary scraped category: fake tech-support page.
  • AI analyst tagged this as a tech-support scam.
Brand Impersonation
High likelihood
0/100
  • Page claims to be Ledger.
  • Domain is a typosquat of ledger.com.
  • AI analyst tagged this as a brand / clone-site impersonation.
  • Clustered with known brand-impersonation infrastructure.
Crypto Fraud
High likelihood
0/100
  • AI analyst tagged this as crypto fraud / wallet-drainer.
  • Page asks for wallet connect or seed-phrase / private key.
  • AI analyst categorised the site as crypto-themed.
Phishing
Low-level signals
0/100
  • Domain is a typosquat of ledger.com.

Tech-support scam — do not call

Pages like this impersonate Microsoft, Apple, or your ISP to trick you into calling a number or granting remote access.

  • Do not interact with ledger-live-desktoop.pages.dev

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Do not call the number and do not install any "support" tool

    Microsoft, Apple, Google, and legitimate ISPs never show a pop-up with a phone number. Installing AnyDesk, TeamViewer, or "Windows Support" at their request hands over your computer.

  • Close the page — end the browser process if needed

    If the page has locked your browser, press Ctrl+Shift+Esc (Windows) or Cmd+Option+Esc (Mac) and end the browser task. Reopen your browser with "Don't restore tabs".

  • If you already gave remote access or paid

    Disconnect the device from the internet. Run a full scan with Malwarebytes or a reputable AV. Change your passwords from a different device. Call your bank to dispute any payment and request a new card.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

  • Our automated security review flags ledger-live-desktoop.pages.dev as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Final Verdict

0
Trust / 100
Final Verdict·ledger-live-desktoop.pages.dev
DANGEROUS

This is a fake Ledger Live Desktop download page. The domain is only hours old, carries 14 malware-engine detections for phishing, and impersonates the official Ledger site with a clear typo in the address. Do not download anything or enter any wallet details.

Close the page immediately and only download Ledger Live from the official ledger.com or shop.ledger.com websites. Never use links from search results or unsolicited messages.

AV engines
92
MT passes
2
Net signals
2
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.