io-ledger-live-web[.]pages[.]dev

PhishDestroy identifies io-ledger-live-web.pages.dev as a brand impersonation domain targeting Ledger, a popular cryptocurrency hardware wallet provider. This domain is designed to deceive users into believing they are accessing the legitimate Ledger Live platform, with the page title explicitly stating "Ledger Live — Secure Crypto App." The threat type here is a crypto drainer, meaning any credentials or private keys entered on this site would be stolen to drain victims' cryptocurrency wallets.

Technical analysis reveals several red flags. The domain was created on April 6, 2026, which is a future date indicating likely manipulated or fabricated WHOIS data. It resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc., a common registrar for malicious sites. SSL certificate is issued by Google Trust Services (WE1), which provides a false sense of security. VirusTotal flags this domain with 4 out of 95 security vendors marking it as malicious, and it appears on 1 security blocklist. Google Safe Browsing status is not reported, but the threat is clear.

Currently, this domain is offline, meaning the hosting provider or registrar has taken action to disable it. However, remaining risk exists as the operators may launch similar domains under different names. PhishDestroy advises users to always verify URLs carefully, use official bookmarks for Ledger Live, and enable two-factor authentication on all crypto accounts. If you have interacted with this domain, change your credentials immediately and contact Ledger support.