overview-trezrr-logn[.]pages[.]dev

The domain overview-trezrr-logn.pages.dev is flagged for brand impersonation, specifically targeting the brand Ledger. No drainer kit has been identified in the analysis. The domain impersonates a legitimate Ledger login portal, potentially to steal user credentials and gain unauthorized access to hardware wallets.

Infrastructure analysis reveals that the domain has a VirusTotal (VT) score of 2/95, indicating low but notable detection by security vendors. It is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.129. The domain was created on March 24, 2026, and employs HSTS, Cloudflare, and HTTP/3 technologies. The SSL certificate is issued by Google Trust Services, and the domain has been blocked by PhishDestroy. It appears on 1 security blocklist and has a Gridinsoft trust score of 0/100, highlighting its lack of credibility.

The domain is currently offline, which suggests that it has been taken down as part of a security response action. However, the risk remains elevated due to the potential for the domain to be reactivated or used in future phishing campaigns. Users are advised to avoid accessing the domain and to report any suspicious activity to their financial or security service providers. Ongoing monitoring and vigilance are recommended to ensure that the domain does not pose a renewed threat.