en-ldgr-com-strt[.]pages[.]dev

The domain en-ldgr-com-strt.pages.dev has been identified as a high-risk brand impersonation phishing site currently active and targeting Ledger cryptocurrency wallet users. This threat specifically mimics the official Ledger wallet setup process to steal sensitive information such as recovery phrases or login credentials.

PhishDestroy's analysis reveals that the domain was registered through Cloudflare Pages and created on March 25, 2026, resolving to IP address 188.114.97.3. It has been flagged by 14 out of 95 VirusTotal security vendors and appears on one security blocklist. The page title, 'Ledger.com/Start – Official Ledger Wallet Setup Guide,' is a direct attempt to deceive users into believing they are on the legitimate Ledger site. The SSL certificate is issued by Google Trust Services, adding a false sense of security.

As the domain remains active, users should avoid interacting with it entirely. Never enter personal or financial information, and always verify URLs by navigating directly to the official Ledger website. If you have already engaged with this site, change your passwords and enable two-factor authentication immediately. Report the domain to relevant authorities and cryptocurrency platforms to help prevent further victimization.