enug-ledgeir[.]pages[.]dev

PhishDestroy identifies enug-ledgeir.pages.dev as an active brand impersonation phishing site targeting Ledger users. The domain hosts a fraudulent Ledger Live portal designed to deceive victims into connecting crypto wallets or entering seed phrases. Current status remains active as of the latest intelligence update. This domain was flagged by 0 of 95 VirusTotal vendors, indicating evasion of automated detection mechanisms. It was registered through Cloudflare, Inc., resolving to IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services, leveraging legitimate trust chains to enhance credibility. VirusTotal detection failure and absence from active blocklists suggest this campaign is in early deployment stages. Immediate action is required to mitigate risk. Users encountering this domain should avoid interaction and report it via PhishDestroy’s verification system. Organizations are advised to monitor network traffic for connections to 188.114.97.3 and block the domain at DNS/gateway levels. Blocklist integration is recommended due to low initial detection rates. Further IOCs (indicators of compromise) are under analysis; updates will be provided as intelligence evolves.