f3d61540[.]ccwnc[.]pages[.]dev

This domain, f3d61540.ccwnc.pages.dev, poses a significant threat by impersonating the well-known cryptocurrency brand Ledger. The domain mimics the appearance of legitimate Ledger services, specifically the Ledger Live page, which can lead to users being tricked into divulging sensitive information or performing actions that could compromise their accounts.

Analysis indicates that the domain has been flagged by 11 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection and potential threat. The domain was registered through Cloudflare, Inc. and created on February 21, 2026. Infrastructure analysis reveals that the domain resolves to the IP address 188.114.97.3, which is located in the United States and is associated with AS13335 Cloudflare, Inc. Additionally, the domain appears on one security blocklist and is currently blocked by PhishDestroy, further indicating its malicious nature. Notably, the domain lacks an SSL certificate, which is a red flag for security-conscious users.

If users have visited f3d61540.ccwnc.pages.dev, it is strongly recommended that they change their Ledger account passwords and any other credentials that may have been entered on the site. Users should also monitor their accounts for any unauthorized activity and consider enabling multi-factor authentication (MFA) if not already in place. Reporting the incident to Ledger's official support channels and conducting a full system scan for malware is advisable to ensure the security of their devices and data.