ledgerwallet[.]support

PhishDestroy first observed ledgerwallet.support on Aug 22, 2026. The hostname explicitly references Ledger; stored content metadata identifies the same apparent target. Current evidence score: 81/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 7 detections among 91 engines: alphaMountain.ai, Chong Lua Dao, CRDF, Emsisoft, Gridinsoft, Seclookup, SOCRadar on Aug 23, 2026 at 17:50 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the malware category; its verdict timestamp was not retained. Non-positive and contextual checks: AlienVault OTX listed 6 community pulse references (not vendor detections) on Aug 23, 2026 at 18:36 UTC. The separate external-blocklist snapshot contained no matches on Aug 23, 2026 at 18:20 UTC. Google Safe Browsing returned no flag on Aug 23, 2026 at 18:35 UTC.

HTTP 301 was recorded on Aug 22, 2026 at 05:28 UTC. Registration records for the domain list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. TLS metadata lists Google Trust Services as the certificate issuer.

Neither a page title nor a landing-page capture is stored. The content indicators and 2 positive source findings support the current Ledger impersonation and phishing classification. The target field identifies Ledger, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.