cloud-web-ledger-en[.]me-page[.]com

The domain cloud-web-ledger-en.me-page.com is a confirmed phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It poses an elevated risk as a cryptocurrency scam designed to deceive users into disclosing sensitive information or transferring funds under false pretenses. No drainer kit was identified, and the site is currently taken offline.

Technical analysis reveals that cloud-web-ledger-en.me-page.com was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Gridinsoft, while Google Safe Browsing did not detect it. The domain appears on 1 security blocklist, PhishDestroy, and was registered through GoDaddy.com, LLC on February 21, 2026. It resolves to the IP address 172.67.221.25, hosted by Cloudflare in the US (AS13335), and uses an SSL certificate issued by Google Trust Services (WE1). The observed page title was 'me-page.com | 525: SSL handshake failed', and the site employed Cloudflare and HTTP/3 technologies. Nameservers are simone.ns.cloudflare.com and sri.ns.cloudflare.com.

Users who interacted with cloud-web-ledger-en.me-page.com should immediately revoke any token approvals and transfer cryptocurrency funds to a new, secure wallet. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions or login attempts. Report the phishing domain to Ledger’s official security team, the registrar (GoDaddy), and platforms like Google Safe Browsing or PhishTank to aid in takedown efforts.