home-ledgr-io-en[.]pages[.]dev

This domain, home-ledgr-io-en.pages.dev, presents a confirmed brand impersonation threat targeting Ledger cryptocurrency wallet users. PhishDestroy has assessed the risk level as elevated because the site mimics Ledger's official interface to harvest login credentials and potentially seed phrases. The page title, "Ledger® Live: Desktop® | Getting Started with Ledger®," is designed to deceive users into believing they are accessing legitimate Ledger Live software.

Technical indicators underscore the malicious nature of this domain. VirusTotal flagged it with 4 out of 95 security vendors marking it as malicious. The domain was registered through Cloudflare, Inc. and resolves to IP address 172.66.47.108. It was created on April 30, 2026, and appears on at least one security blocklist. The SSL certificate is issued by Google Trust Services / WE1, providing a false sense of security. The domain is currently offline, but similar threats may reappear.

Users who may have interacted with this site should immediately change their Ledger account passwords and enable two-factor authentication. If any seed phrases or private keys were entered, the associated cryptocurrency wallets should be considered compromised and funds moved to a new, secure wallet. Always verify URLs by typing them directly into the browser rather than clicking links from emails or messages. Report any suspicious domains to Ledger's official support channels and to anti-phishing organizations like PhishDestroy.