supprt-en-ledge[.]pages[.]dev

Domain supprt-en-ledge.pages.dev is a confirmed brand impersonation site targeting Ledger users under active investigation for phishing activity.

This domain was flagged by 4 of 95 VirusTotal vendors, registered through Cloudflare, Inc., resolves to IP 188.114.97.3, and is currently still active. The page title 'Ledger Start - Getting Started Ledger' mirrors Ledger’s legitimate onboarding page, deceiving users into entering recovery phrases or sensitive credentials. No blocklist detections or trust score mitigations have been applied as of the latest scan.

PhishDestroy identifies this domain as a high-risk Ledger impersonation campaign. Technical indicators include the Google Trust Services SSL certificate, Cloudflare hosting, and the IP 188.114.97.3. The absence of VirusTotal detections and blocklist entries suggests this campaign is either newly deployed or employs evasion tactics. Users should avoid interacting with this domain entirely. Ledger users are advised to verify all URLs against the official ledger.com domain, enable multi-factor authentication, and immediately revoke any credentials entered on suspicious pages. Organizations are recommended to implement DNS filtering rules to block this domain and similar patterns, and to conduct user awareness training on phishing tactics targeting cryptocurrency wallet users.