edge--ledgrr-start[.]pages[.]dev

PhishDestroy identifies edge--ledgrr-start.pages.dev as an active Ledger wallet phishing site designed to steal cryptocurrency credentials. This domain mimics the legitimate Ledger wallet interface to trick users into entering their recovery phrases or private keys, which are then harvested by attackers. The site is hosted on Cloudflare Pages with a Google Trust Services SSL certificate, making it appear legitimate at first glance. Users who interact with this page risk losing access to their cryptocurrency funds permanently.

This domain was flagged with a 9/95 detection ratio on VirusTotal, indicating no antivirus or security vendor has yet blacklisted it despite its malicious intent. The domain is registered through Cloudflare, Inc., and resolves to IP address 188.114.96.3, which is associated with other suspicious activity. The use of a Google Trust Services SSL certificate adds a layer of false legitimacy, while Cloudflare’s hosting obscures the true origin of the site. The lack of detections suggests this phishing campaign is either very new or has evaded traditional detection methods, making it particularly dangerous for unsuspecting users.

If you visited edge--ledgrr-start.pages.dev, assume your Ledger wallet credentials or recovery phrases may have been compromised. Immediately transfer any remaining funds to a new wallet using a different device, and revoke any permissions granted to the compromised wallet. Use a reputable password manager to change all related passwords and enable two-factor authentication where possible. Report the domain to your antivirus provider and consider using a dedicated tool like PhishDestroy’s real-time scanner to verify other suspicious links. Avoid interacting with any pop-ups or prompts on this site, as they may further compromise your data.