en-us-ledger-us[.]teachable[.]com

The domain en-us-ledger-us.teachable.com is a cryptocurrency phishing site that impersonates Ledger, a well-known hardware wallet provider. This brand impersonation scam targets users by mimicking legitimate Ledger services to deceive victims into disclosing sensitive information or transferring cryptocurrency. No drainer kit was detected, but the site was actively used for cryptocurrency-related fraud before being taken offline.

Technical indicators confirm the domain en-us-ledger-us.teachable.com was flagged by 1 of 95 VirusTotal security vendors, including CRDF, and appeared on 1 security blocklist (PhishDestroy). It was registered through Amazon Registrar, Inc. on February 21, 2026, and resolved to the IP address 34.54.192.65, hosted by Google LLC in the US. The SSL certificate was issued by Google Trust Services (WR3), and the site used technologies such as Google Cloud, Mailgun, and HSTS. At the time of analysis, the domain returned a 404 error with the page title '404 Error - Teachable' and was served via Cloudflare nameservers.

Users who interacted with en-us-ledger-us.teachable.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Report the phishing domain to Ledger’s official security team, Google Safe Browsing, and platforms like PhishTank or the Anti-Phishing Working Group to assist in takedown efforts.