Fake Ledger phishing websites have been spotted recently. Please stay vigilant.

How to Spot
Check whether the domain is ledger.com; the official site never asks for your recovery phrase; beware of "security-verification" popups.
Security Reminder
Never enter your recovery phrase on any web page.