getting-started-ledgr-easily[.]pages[.]dev

PhishDestroy has flagged getting-started-ledgr-easily.pages.dev as a phishing page that impersonates a legitimate Ledger hardware-wallet setup guide. The site prompts visitors to install a counterfeit browser extension that steals cryptocurrency funds and harvests seed phrases. Visitors who enter their recovery phrases or install the extension risk losing access to their digital assets within minutes. This domain was registered through Cloudflare, Inc. and resolved to IP 188.114.97.3 at the time of analysis. VirusTotal’s aggregated scan on 2024-05-19 showed only 1 out of 95 participating security vendors had detected the threat, underscoring how new and stealthy the campaign is. The site also holds a valid SSL certificate issued by Google Trust Services, which attackers use to appear legitimate and bypass browser warnings. If you visited the site, do not enter any wallet recovery phrases or download any suggested software. Disconnect from the internet to halt potential data exfiltration, then run a full antivirus scan. Revoke any recently installed browser extensions and change passwords in a separate, known-safe environment. Report the URL to PhishDestroy’s crawler for blacklist inclusion so others are warned.