90ij9m786fy543yhkonu64s[.]pages[.]dev

The domain 90ij9m786fy543yhkonu64s.pages.dev has been identified as a brand impersonation threat, specifically targeting the brand Argent. It was designed to mimic the Ledger Live page, potentially to deceive users into compromising their credentials or other sensitive information. Currently, the domain is offline, mitigating immediate risk.

VirusTotal analysis shows that 10 out of 95 security vendors have flagged this domain as malicious. The domain was registered through Cloudflare Pages and resolves to the IP address 2606:4700:310c::ac42:2f5d, located within the United States under AS13335 Cloudflare, Inc. It was created on March 12, 2026, and has been listed on one security blocklist. The SSL certificate for this domain was issued by Let's Encrypt, with an identifier of E7.

Currently, the domain is offline and has been blocked by PhishDestroy. Users are advised to remain vigilant and avoid engaging with domains that have suspicious characteristics or that mimic well-known brands. It is recommended to use comprehensive security tools to detect and block such threats proactively. Monitoring for similar domains and improving awareness about phishing tactics are also encouraged to enhance security posture.