ledger-live-login-com[.]pages[.]dev

PhishDestroy has identified ledger-live-login-com.pages.dev as an elevated-risk domain engaged in brand impersonation targeting Ethereum users. This specific threat type involves mimicking legitimate Ethereum-related services—in this case, the Ledger Live platform—to deceive users into revealing sensitive information. The domain was registered through Cloudflare, Inc., a common registrar for malicious sites, and was created on September 08, 2025, suggesting it was recently set up for phishing campaigns. The page title, "Step-by-Step Guide to Adding Accounts in Ledger Live," was clearly designed to appear helpful while luring victims.

Technical indicators paint a concerning picture. The domain resolves to IP address 172.66.47.181 and uses an SSL certificate from Google Trust Services / WE1, which may lend it false legitimacy. VirusTotal analysis shows that 10 out of 69 security vendors flag this domain as malicious, a strong signal of its dangerous nature. Additionally, the domain appears on one security blocklist, and its trust score is low due to these indicators. The domain is currently offline, but PhishDestroy warns that similar domains may reappear.

To protect against this specific brand impersonation phishing threat, users should always verify the URL before entering credentials or sensitive data on any Ethereum-related site. PhishDestroy recommends enabling two-factor authentication on all crypto accounts, using hardware wallets for transactions, and never clicking on links from unsolicited emails or messages. If you suspect you have interacted with this domain, change your passwords immediately and monitor your accounts for unauthorized activity. Always cross-check official support pages for legitimate guides rather than trusting third-party domains.