site-ledgr-en-us[.]pages[.]dev

site-ledgr-en-us.pages.dev is a recently active phishing domain impersonating the Ledger hardware wallet login portal, currently under investigation by PhishDestroy. This domain is designed to deceive users into surrendering sensitive cryptocurrency wallet credentials under the guise of a legitimate service update or security verification process.

PhishDestroy has identified this domain as a generic phishing site with no VirusTotal detections as of the time of writing, flagged by 9 of 95 vendors, indicating it remains undetected by most security solutions. This domain was registered through Cloudflare, Inc., and resolves to IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services, which may lend an air of legitimacy to unsuspecting victims. Despite its low detection rate, the domain poses an immediate threat to users seeking to access Ledger’s official services, as it mimics the legitimate Ledger login interface to harvest credentials and potentially compromise cryptocurrency assets.

As this domain is currently active and under investigation, PhishDestroy advises users to exercise extreme caution and avoid interacting with site-ledgr-en-us.pages.dev. If you have already entered credentials on this domain, immediately transfer your funds to a new wallet and revoke any connected permissions. Report the domain to your security provider and Ledger’s official support channels to aid in its swift takedown. Monitor your accounts for unauthorized transactions and consider enabling multi-factor authentication where possible to mitigate further risks.