guide-ldger-usa[.]pages[.]dev

Guide-ldger-usa.pages.dev is a phishing domain targeting Ledger users. With 3 out of 94 vendors on VirusTotal marking it as malicious, the site attempts to mimic Ledger's official website. The page title, "Official Site® Secure Your Crypto Today | Ledger.com/start," is designed to mislead users into believing they are accessing a legitimate Ledger resource.

The domain is registered through Cloudflare, Inc. and hosted on an IP address located in Canada, also managed by Cloudflare. Its SSL certificate is issued by Google Trust Services, which might lend it an appearance of legitimacy to unsuspecting users. The domain was created on April 17, 2026, and was detected by PhishDestroy just a day later, on April 18, 2026.

Despite being flagged by only a few vendors, the presence of the domain on PhishDestroy's blocklist highlights its potential threat. The platform risk score of 76 out of 100 indicates a significant level of danger. The domain's purpose is clear: to deceive users into providing sensitive information under the guise of securing their cryptocurrency. Its use of a similar URL structure to Ledger's official site is a common tactic in phishing schemes, aiming to exploit the trust users place in familiar brands.