new-en-ledgr[.]pages[.]dev

This domain, new-en-ledgr.pages.dev, poses a high-risk brand impersonation threat specifically targeting users of Ledger hardware wallets. The phishing page mimics the official Ledger setup interface, presenting a fraudulent "Ledger Start - Ledger Wallet Setup Guide" to deceive victims into entering sensitive recovery phrases or private keys. Such attacks are designed to compromise cryptocurrency assets by tricking users into disclosing credentials under the guise of legitimate wallet initialization procedures.

Analysis indicates the domain was registered on August 26, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.45.42, hosted under AS13335. Security vendor detections on VirusTotal report 5 out of 95 engines flagging the domain as malicious. The domain appears on one security blocklist, specifically PhishDestroy, and utilizes an SSL certificate issued by Google Trust Services (WE1). Infrastructure review confirms the domain remains active, with no evidence of takedown or mitigation at the time of assessment.

Users who have visited new-en-ledgr.pages.dev or interacted with its content are advised to immediately cease all engagement and revoke any permissions granted to associated applications or browser extensions. Affected individuals should perform a full system scan using updated security tools to detect potential malware or unauthorized access. Ledger users should verify their wallet integrity by cross-referencing official support channels and consider migrating assets to a new seed phrase if compromise is suspected. No sensitive information, particularly recovery phrases or private keys, should be entered on unverified platforms.