learn-en-ledger[.]pages[.]dev

This domain, learn-en-ledger.pages.dev, is an active phishing site that impersonates Ledger, the popular cryptocurrency hardware wallet company. Its goal is to trick people into entering sensitive information such as recovery phrases or login credentials, which could lead to stolen crypto assets. The site poses as a legitimate Ledger onboarding page, but it is a carefully crafted trap.

PhishDestroy's investigation reveals that the site is still active and has been flagged by 4 out of 95 security vendors on VirusTotal, a clear indication of malicious intent. The domain was created on April 6, 2026, which is suspiciously recent for a site claiming to be associated with an established brand. It is registered through Cloudflare, Inc. and uses an SSL certificate from Google Trust Services, which can make it appear legitimate at first glance. The page title, "Official Site® | Get started with Ledger*", is a direct imitation of Ledger's official site, designed to deceive visitors.

If you have visited this site or entered any information, act immediately. Do not enter any recovery phrases, passwords, or personal data. Change your Ledger account password and enable two-factor authentication if you have an account. If you entered your recovery phrase, assume your crypto wallet is compromised and transfer funds to a new wallet generated on a secure device. Report the domain to your security team or local authorities if necessary. Stay vigilant and always verify URLs before interacting with them.