leedger-com-us-start[.]pages[.]dev

PhishDestroy identifies leedger-com-us-start.pages.dev as an active cryptocurrency phishing page posing as a Ledger wallet login portal, currently under investigation and assigned a risk level of 'under_investigation'. Users may encounter this site via malicious links or spoofed emails claiming to be from 'Ledger.com' support or security alerts. This domain resolves to IP 172.66.44.97 and is registered through Cloudflare, Inc., which obscures the true hosting origin, a common tactic among phishing operators. At present, VirusTotal reports 11 out of 95 scanning engines have flagged this domain, indicating it has not yet been widely recognized by automated security tools. Despite being hosted behind Cloudflare's proxy, the domain holds a valid SSL certificate issued by Google Trust Services, which may help it appear legitimate to unsuspecting users. Cloudflare's Pages.dev platform has been historically exploited to host convincing fake login pages that mimic legitimate services such as Ledger, a trusted hardware wallet provider. To mitigate exposure to this phishing threat, users are advised to avoid clicking on any links purporting to be from Ledger unless they are certain of the sender's authenticity. Always navigate directly to the official Ledger website (ledger.com) via a trusted browser—never through email links. Enable multi-factor authentication (MFA) on all cryptocurrency accounts and consider using hardware wallet recovery phrases offline. Report any suspected phishing attempts involving this domain to Ledger support and update passwords only after verifying the site's URL shows 'https://www.ledger.com' in the address bar. Exercise extra caution with sites hosted on pages.dev subdomains, as they are frequently abused in credential-harvesting campaigns.