live-ioledgr[.]pages[.]dev

The domain live-ioledgr.pages.dev is under investigation for brand impersonation, specifically targeting the cryptocurrency brand Ledger. This domain attempts to mimic the official Ledger Live platform, which is a well-known cryptocurrency wallet dashboard used for managing digital assets. The domain does not appear to be associated with any known drainer kits or malware, but the impersonation of a trusted brand is a significant threat.

Infrastructure analysis reveals that live-ioledgr.pages.dev has a VirusTotal detection score of 0/95, indicating that it has not been flagged by the majority of security engines. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.44.186. It was created on April 12, 2026, and is currently marked as offline. The site employs HSTS, Cloudflare, and HTTP/3 technologies, which can be used to enhance the credibility of the impersonation. The domain appears on one security blocklist, and it is blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, adding another layer of perceived legitimacy.

The domain is currently offline, which may indicate that it has been taken down by the registrar or the hosting provider in response to the threat. However, the offline status does not necessarily eliminate the risk, as the domain could be reactivated at any time. Users are advised to exercise caution and verify the authenticity of any website claiming to be Ledger Live by using official channels. Security teams should monitor the domain for any signs of reactivation and consider adding it to internal blocklists to prevent potential future threats.