ledhgyg-djdjdhd[.]pages[.]dev

The domain ledhgyg-djdjdhd.pages.dev has been identified as a potential threat due to brand impersonation. The threat type is brand impersonation, specifically targeting the brand Ledger. Analysis suggests that the domain was likely used to trick users into believing they were interacting with legitimate Ledger services, potentially leading to credential theft or financial loss.

Technical indicators for ledhgyg-djdjdhd.pages.dev include a VirusTotal detection score of 18/95, indicating that 18 out of 95 security vendors flagged this domain as malicious. The domain is registered through Cloudflare, Inc., and the SSL certificate is issued by Let's Encrypt (E8). The domain resolves to the IP address 172.66.47.3, which is located in California, USA, and is associated with Cloudflare, Inc. The domain was created on April 26, 2026, and it appears on one security blocklist. The page title found was 'Ledger Live', further confirming the impersonation of the Ledger brand.

The domain is currently offline, which suggests that it has been taken down or is no longer active. Despite this, the infrastructure used (Cloudflare and Let's Encrypt) indicates a low barrier to reactivation. Organizations and individuals should remain vigilant and ensure that any bookmarks or saved links to this domain are removed to prevent accidental access. The remaining risk is considered elevated due to the potential for the domain to be reactivated and reused for similar malicious activities.