ldgeer-ledger[.]webflow[.]io

PhishDestroy identifies ldgeer-ledger.webflow.io as a brand impersonation threat specifically targeting Ledger users. This domain is currently offline, but its purpose was to mimic the legitimate Ledger support portal, using the page title 'Ledger.com/Start® | Getting started with Ledger Support' to deceive visitors into believing they were accessing official resources.

The domain was created on March 3, 2026, and registered through Webflow, which served as the hosting platform. Technical analysis reveals that the site resolved to IP address 172.64.151.8 and was secured with an SSL certificate from Google Trust Services, lending it an air of legitimacy. On VirusTotal, 19 out of 95 security vendors flagged the domain as malicious, and it appears on 1 security blocklist. Despite these indicators, the risk level was assessed as elevated due to the high value of the Ledger brand in the cryptocurrency space.

As the domain is now offline, the immediate threat has been neutralized. However, users should remain vigilant for similar phishing campaigns that may emerge. PhishDestroy recommends that Ledger users always verify URLs directly from official sources, enable two-factor authentication, and never enter sensitive information on unsolicited links. For any suspected phishing attempts, report them to relevant authorities and check the full report for detailed indicators.