io-ledger-login[.]pages[.]dev

The domain io-ledger-login.pages.dev has been identified as a brand impersonation site targeting Ledger, the cryptocurrency hardware wallet company. This threat is currently active and presents a high risk to users who may be tricked into entering sensitive information. The page title, "Ledger Live Integrations — Ledger Developer Portal (Presentation)," is designed to appear legitimate, but the domain is not affiliated with Ledger in any way.

This domain was created on April 6, 2026, through Cloudflare, Inc., and resolves to IP address 172.66.47.160. VirusTotal analysis shows that 10 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), which adds a superficial layer of trust. However, the registration date, registrar, and low vendor detection rate all point to a recently deployed phishing campaign.

Given the active status of io-ledger-login.pages.dev, users should avoid visiting this domain and report it to relevant authorities. Ledger customers should only use official channels to access their accounts or make transactions. PhishDestroy recommends blocking this domain at the network level and educating users about the risks of brand impersonation sites. If any credentials have been entered on this site, users should change their passwords immediately and enable two-factor authentication where possible.