# information-ledger-logon.webflow.io — MALICIOUS

> The domain information-ledger-logon.webflow.io is linked to high-risk phishing. Avoid interaction and report suspicious emails to stay safe online.

## Summary
PhishDestroy identifies information-ledger-logon.webflow.io as an active phishing domain with a high risk level. The domain is classified under generic phishing, aiming to deceive users into divulging sensitive information through fraudulent means.

Supporting evidence includes its resolution to the IP address 104.18.36.248, which is part of a content delivery network commonly abused for hosting phishing pages. Additionally, VirusTotal flags this domain as malicious by 19 out of 95 security vendors, reinforcing the threat credibility associated with this infrastructure. The domain’s hosting on the Webflow platform indicates it may be leveraging legitimate web services to mask its malicious intent.

To mitigate risks, users are strongly advised to avoid clicking any links or providing credentials on this domain. PhishDestroy currently marks this domain as active and recommends heightened vigilance, especially when receiving unsolicited emails or messages referencing this site. Reporting such phishing attempts to security teams or through official channels can help prevent further victimization.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Target brand: Ledger
- Page title: Ledger@ Live : Login** && Most Secure Crypto Wallet

## Domain Intelligence
- Registered: 2026-03-05 13:07:01
- Registrar: MarkMonitor, Inc.
- Country: US
- IP: 104.18.36.248
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: NS_NOT_FOUND
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 20 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "Ermes", "ESET", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "MalwareURL", "Netcraft", "OpenPhish", "Sophos", "Trustwave", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: Getting started with Ledger Live Login - Ledger SupportLaunch Ledger Live: Open the Ledger Live login application on your computer.

### Page Text
Ledger@ Live : Login** && Most Secure Crypto Wallet

### External Scripts
- https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=677f62bc8ab2fc6132171d27
- https://cdn.prod.website-files.com/677f62bc8ab2fc6132171d27/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js

### External Links
- https://webflow.com?utm_campaign=brandjs

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbdf5-7e4f-70cb-86bc-b2e07a572540.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/information-ledger-logon.webflow.io
- Wayback Machine: https://web.archive.org/web/https://information-ledger-logon.webflow.io
- PhishDestroy: https://phishdestroy.io/domain/information-ledger-logon.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/information-ledger-logon.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/information-ledger-logon.webflow.io/
Last updated: 2026-03-16