get-ledgar-io-en-us[.]pages[.]dev

The domain get-ledgar-io-en-us.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It presents itself as a legitimate Ledger Live download portal but is designed to deceive users into exposing sensitive information or funds. The site poses an elevated risk as a cryptocurrency scam, though no drainer kit was identified. As of the latest verification, get-ledgar-io-en-us.pages.dev has been taken offline.

Technical analysis reveals that get-ledgar-io-en-us.pages.dev was flagged by 2 of 95 security vendors on VirusTotal, including LevelBlue and Phishing Database. It appears on one security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through Cloudflare, Inc. on September 24, 2025, and resolves to the IP address 172.66.44.201, hosted by Cloudflare in California. The SSL certificate is issued by Google Trust Services (WE1), and the observed page title was 'Ledger Live Download - Secure Hardware Wallet Management'. The site employed HSTS, Cloudflare, and HTTP/3 technologies, and its Gridinsoft trust score is 0/100.

Users who interacted with get-ledgar-io-en-us.pages.dev should immediately revoke any token approvals and transfer cryptocurrency holdings to a new wallet to prevent unauthorized access. If credentials were entered, change passwords for Ledger and associated accounts, enable two-factor authentication, and monitor for fraudulent transactions. Report the phishing domain to Ledger’s security team, Cloudflare’s abuse portal, and platforms like Google Safe Browsing or PhishTank to aid in takedown efforts.