nano-ledger[.]pages[.]dev

The domain nano-ledger.pages.dev is a phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It presents itself as a legitimate Ledger platform to deceive users into entering sensitive information or interacting with malicious cryptocurrency transactions. No drainer kit was identified, but the site was actively used for cryptocurrency-related scams. As of the latest verification, nano-ledger.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of nano-ledger.pages.dev. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Ermes, and appears on 1 security blocklist (PhishDestroy). It was registered through Cloudflare, Inc. on September 16, 2025, and resolves to the IP address 188.114.96.3, hosted by Cloudflare in Canada. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Ledger.com Start - Secure Crypto Solutions'. Technologies detected include HSTS, Cloudflare, and HTTP/3. Gridinsoft assigned a trust score of 0/100, and the current HTTP status is 403.

Users who interacted with nano-ledger.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor accounts for unauthorized transactions and report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s security team. Victims may also file complaints with local cybercrime authorities or organizations like the FBI’s IC3.