# ledger-live-us-io.pages.dev — SUSPICIOUS

> PhishDestroy identifies ledger-live-us-io.pages.dev as a brand impersonation site that mimics Ledger, with 2/95 VirusTotal detections.

## Summary
ledger-live-us-io.pages.dev is a fraudulent site mimicking the legitimate Ledger crypto wallet to trick users into entering seed phrases or private keys. When victims land on this page, they are presented with a fake Ledger Live interface designed to harvest sensitive wallet information, which attackers then use to drain crypto assets directly from victims’ wallets. This is a form of brand impersonation commonly used in crypto drainer campaigns to exploit trust in well-known brands.


PhishDestroy’s analysis shows this domain was flagged by 2 out of 95 security vendors on VirusTotal and is hosted on Cloudflare infrastructure resolving to IP 188.114.96.3. The domain is part of the Pages.dev platform, a legitimate service from Cloudflare, but is being abused to host malicious content that impersonates Ledger’s official services. Unlike legitimate Ledger domains, this one uses a Pages.dev subdomain structure and lacks the official ledger.com domain authority.


If you visited ledger-live-us-io.pages.dev, do not enter any wallet seed phrases, private keys, or recovery information. Disconnect from the site immediately and inspect your device for malware. If you entered sensitive data, transfer your remaining crypto to a newly created wallet and revoke any unauthorized access via your wallet’s app or Ledger Live’s official interface. Always access Ledger services only through verified bookmarks or by manually typing ledger.com into your browser.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ec8f6091-15c7-4da2-8eb8-8d11790654f0
- PhishDestroy: https://phishdestroy.io/domain/ledger-live-us-io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledger-live-us-io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledger-live-us-io.pages.dev/
Last updated: 2026-03-21