# lives-ldger-io.pages.dev — SUSPICIOUS

> lives-ldger-io.pages.dev impersonates Ledger Live to steal crypto. Zero VirusTotal detections detected. Verify on PhishDestroy to avoid drainer risks.

## Summary
PhishDestroy identifies an active phishing campaign targeting Ledger users via the domain lives-ldger-io.pages.dev. This site masquerades as the official Ledger Live wallet dashboard, presenting a convincing fake login interface designed to harvest seed phrases and private keys. Upon entry, victims may unknowingly authorize a crypto drainer script that immediately transfers assets to attacker-controlled wallets, resulting in irreversible financial loss. The page title mirrors the legitimate Ledger Live portal, enhancing the illusion of authenticity and increasing the likelihood of user deception. Security analysts assess this campaign as high-risk due to its targeted nature and immediate financial impact potential.


Technical indicators confirm this domain is actively malicious. VirusTotal analysis shows 0 out of 95 detection engines flagged the page as malicious at the time of analysis, indicating evasion of standard security tools. The domain is hosted on Cloudflare Pages, leveraging Google Trust Services for SSL encryption to appear legitimate. The infrastructure resolves to IP address 172.66.44.91, a Cloudflare edge node commonly abused in phishing operations. Despite zero detections, the domain remains unblocked by major browsers and security platforms, allowing continued access to potential victims. PhishDestroy confirms this site is still active and propagating through spam emails, social media, and fake ads.


Users who visited lives-ldger-io.pages.dev should immediately disconnect from the internet and close all browser tabs. Do not enter any credentials or seed phrases on this site. Scan all connected devices for malware using reputable antivirus tools. If any crypto assets were exposed, revoke all wallet permissions via blockchain explorers and transfer remaining funds to a new, secure wallet. Report the domain to PhishDestroy for deactivation and block it on all devices. Avoid interacting with Ledger-related URLs received via unsolicited messages—always verify official links at ledger.com or through verified Ledger support channels.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP ?)
- Target brand: Ledger
- Page title: Ledger Live | Official Cryptocurrency Wallet Dashboard

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.91

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/403cf67f-8c06-44ef-bf0a-79d8b40dc966
- PhishDestroy: https://phishdestroy.io/domain/lives-ldger-io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/lives-ldger-io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/lives-ldger-io.pages.dev/
Last updated: 2026-04-12