en-docs-ledger-com[.]teachable[.]com

The domain en-docs-ledger-com.teachable.com is a confirmed phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It posed as an official Ledger support page with the title 'Official Site® | Ledger.com/Start® | Getting started' to deceive users into entering sensitive information or downloading malicious software. No drainer kit was detected, but the site was actively used for cryptocurrency-related scams. As of the latest verification, en-docs-ledger-com.teachable.com has been taken offline.

Technical indicators confirm the malicious nature of en-docs-ledger-com.teachable.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Webroot, and appeared on 1 security blocklist (PhishDestroy). It was registered through Amazon Registrar, Inc. on February 21, 2026, and resolved to the IP address 34.54.192.65, hosted on Google Cloud (AS396982). The SSL certificate was issued by Google Trust Services / WR3, and the domain used Cloudflare nameservers. Despite these red flags, Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with en-docs-ledger-com.teachable.com should take immediate action to secure their assets. For cryptocurrency-related scams, revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If credentials were entered, change passwords for all associated accounts, enable two-factor authentication (2FA), and monitor for unauthorized transactions. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts.