faq-ledgr-us[.]pages[.]dev

PhishDestroy identifies faq-ledgr-us.pages.dev as an active Ledger wallet phishing domain operating under Cloudflare hosting with a Google Trust Services SSL certificate. This page is registered through Cloudflare, Inc. and currently resolves to IP 172.66.44.230. VirusTotal scans return 0 detections (8/95 engines), indicating the page has evaded automated detection despite mimicking official Ledger wallet login flows to harvest private keys and seed phrases. This domain was flagged by domain safety monitors for clear signs of targeted phishing against cryptocurrency users. The page uses a deceptive subdomain (faq-ledgr-us) to appear related to Ledger hardware wallet support, a common tactic in credential harvesting campaigns. Risk factors include low initial detection rates and hosting behind a reputable CDN, which can delay takedown efforts. Historical analysis shows similar Cloudflare-hosted phishing pages remain active for extended periods, increasing user exposure. If you visited faq-ledgr-us.pages.dev, disconnect your device from the internet immediately and inspect browser extensions or installed software for unauthorized access. Do not enter any wallet recovery phrases, passwords, or private keys on this site. Use a hardware wallet offline to verify balances and transfer funds to a newly generated address. Report the domain to Cloudflare Abuse and your local cybercrime unit, including screenshots and transaction details if funds were accessed. Update passwords on all devices and enable multi-factor authentication everywhere possible.