ldger-io-support[.]pages[.]dev

PhishDestroy identifies ldger-io-support.pages.dev as an active brand impersonation phishing domain masquerading as Ledger.io support to deceive cryptocurrency users. This malicious domain resolves to IP 172.66.47.151 and leverages Cloudflare’s infrastructure, hosting a fraudulent page under Google Trust Services’ SSL certificate to appear legitimate. Investigations reveal this domain has not yet been flagged by security vendors, with VirusTotal currently showing 11 out of 95 detections, indicating a stealthy operation. The site was registered through Cloudflare, Inc., a common choice for malicious actors seeking anonymity and rapid deployment. Notably, the domain’s use of a Pages.dev subdomain suggests an attempt to exploit reputable domains to bypass security filters. Users who have encountered or visited this domain should refrain from entering any sensitive information, including Ledger account credentials or cryptocurrency wallet details. To mitigate risks, immediately clear browser cache and cookies, scan for malware using trusted antivirus tools, and report the domain to your organization’s security team or directly to Ledger’s official channels. Proactive blocking of the domain and IP address is strongly recommended to prevent further exploitation.