live-ldger-io[.]pages[.]dev

PhishDestroy identifies live-ldger-io.pages.dev as a fraudulent domain currently active and under investigation for generic phishing activities, specifically impersonating Ledger cryptocurrency wallet login pages to deceive users into surrendering credentials or transferring crypto assets to attacker-controlled wallets.

This domain was flagged by 2 of 95 VirusTotal vendors, exhibits a Google Trust Services SSL certificate, and is registered through Cloudflare, Inc. The domain resolves to IP 172.66.47.204, which is associated with a high-risk cloud infrastructure provider. Historical data indicates no prior blocklist entries, maintaining a clean initial reputation despite the absence of antivirus detection. The domain's recent creation and lack of trust signals suggest a rapidly deployed phishing campaign leveraging cloud hosting for evasion and scalability.

Given the domain's active status and specific threat of Ledger impersonation, users are advised to avoid interacting with any links or content hosted on live-ldger-io.pages.dev. PhishDestroy recommends verifying the authenticity of Ledger-related communications by accessing official channels directly through known, trusted URLs or contact methods. Enable multi-factor authentication (MFA) on all cryptocurrency accounts, use hardware wallets for storage, and report suspicious domains to PhishDestroy for further analysis and community protection. Exercise heightened caution with domains hosted on cloud providers, particularly those using free subdomains like .pages.dev, as these are frequently exploited in phishing campaigns.