ledger-etm[.]pages[.]dev

The domain ledger-etm.pages.dev is identified as a phishing site engaging in brand impersonation targeting the Ledger cryptocurrency brand. It poses a scam threat by mimicking Ledger's support page to deceive users. The site is currently taken offline and does not host any known drainer kits. Users searching whether ledger-etm.pages.dev is safe should consider it a phishing scam due to its impersonation tactics despite its offline status.

Technical analysis shows ledger-etm.pages.dev was created on April 27, 2025, and is registered through Cloudflare, Inc. It resolves to the IP address 172.66.47.150 located in the US under AS13335 Cloudflare, Inc. The domain uses an SSL certificate issued by Google Trust Services / WE1 and employs security technologies such as HSTS, Cloudflare, and HTTP/3. VirusTotal reports 0 of 95 detections, and Google Safe Browsing has not flagged it. However, it appears on one security blocklist, PhishDestroy, and currently returns an HTTP 403 status. The page title observed was 'Ledger Support', further indicating brand impersonation.

Users who encountered ledger-etm.pages.dev should take precautions typical for credential phishing scams, including changing passwords associated with Ledger services, enabling two-factor authentication, and monitoring accounts for suspicious activity. Since the site is offline, immediate risk is reduced, but vigilance remains essential. Suspected phishing attempts involving this domain can be reported to security blocklists like PhishDestroy or to Ledger's official support channels to aid in threat mitigation.