connect-ledger-loggon-eng[.]pages[.]dev

This domain is flagged as a high-risk credential phishing site targeting Ledger wallet users. Analysis indicates the infrastructure is designed to harvest login credentials by mimicking the official Ledger authentication portal, presenting a direct threat to cryptocurrency asset security. Infrastructure analysis reveals the domain connect-ledger-loggon-eng.pages.dev was registered on June 16, 2026, through Cloudflare, Inc. It resolves to IP address 188.114.97.3 and presents a valid SSL certificate issued by Google Trust Services (WE1). The page title, 'Ledger Login | Secure Access to Your Ledger Wallet Account,' reinforces the brand impersonation. Detection engines report 7/95 security vendors flag the domain as malicious, and it appears on one security blocklist (PhishDestroy). The domain remains active as of this assessment. Mitigation requires immediate action from network security teams and end-users. Organizations should block the domain and its resolving IP at perimeter security controls, including firewalls, web proxies, and DNS filters. End-users should verify domain authenticity before entering credentials, cross-referencing official Ledger communication channels for legitimate login portals. Security teams are advised to monitor for credential reuse attempts and deploy multi-factor authentication (MFA) as an additional safeguard against harvested credentials. Domain takedown requests should be submitted to the hosting provider and registrar to disrupt the phishing operation.