crypto-ledgr-com[.]pages[.]dev

The domain crypto-ledgr-com.pages.dev was identified as a brand impersonation phishing site specifically targeting Ledger cryptocurrency hardware wallet users. This threat type involves creating a convincing replica of the official Ledger website to steal login credentials, recovery phrases, or other sensitive information. The site operated under the page title "Ledger™ Start ⚡ Neon Crypto Hub" and was designed to trick users into believing they were accessing a legitimate Ledger service.

Technical analysis reveals that this domain was created on April 13, 2026, and registered through Cloudflare, Inc. It resolves to IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services (WE1). VirusTotal data shows that 8 out of 95 security vendors flagged this domain as malicious, and it appears on 1 security blocklist. Notably, Google Safe Browsing (GSB) status is not listed as active, but the high vendor detection rate indicates strong consensus among security tools.

The domain is currently offline, meaning the immediate threat has been neutralized. However, users who may have interacted with the site before it was taken down should take precautionary measures. It is strongly recommended to change any passwords entered on the site, enable two-factor authentication on all cryptocurrency accounts, and monitor for unauthorized transactions. If a Ledger recovery phrase was entered, immediately transfer funds to a new wallet generated on a clean device. PhishDestroy advises remaining vigilant against similar phishing campaigns that may use variations of this domain or other lookalike URLs.