en-ledger[.]netlify[.]app

The domain en-ledger.netlify.app is identified as a brand impersonation threat targeting Ledger. This domain was designed to mimic Ledger for fraudulent purposes by presenting itself with a page title "Official Site® | Ledgér.com/Start® | Getting started." The domain's current status is offline following actions to mitigate the threat and it being blocked by several security measures, including PhishDestroy.

This malicious domain was flagged by 19 out of 95 security vendors on VirusTotal, signaling a significant recognition of its phishing nature. It was registered through Name.com, Inc and hosted on the IP address 63.176.8.218, located in Germany under the infrastructure of Amazon.com, Inc (AS16509). The domain was created on February 21, 2026, and has been added to at least one security blocklist. It had been operating with an SSL certificate issued by DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1.

Currently, the domain en-ledger.netlify.app is offline, which mitigates immediate risk. Users are advised to remain vigilant against similar threats, particularly those impersonating well-known brands like Ledger. It is recommended to cross-check URLs with official sources and use up-to-date security software. Security teams should consider maintaining a heightened monitoring regime for newly registered domains mimicking brand names and ensure their blocklists are updated accordingly.