ldgre-logn-in[.]pages[.]dev

This domain, ldgre-logn-in.pages.dev, is identified as a brand impersonation phishing infrastructure targeting Ledger, a cryptocurrency hardware wallet provider. The threat type involves fraudulent login pages designed to harvest credentials from users attempting to access Ledger Live, the brand’s official wallet management application. As of the latest verification, the domain has been taken offline, though prior activity indicates a deliberate attempt to deceive victims into disclosing sensitive authentication details. Analysis of the domain reveals multiple technical indicators of malicious intent. The domain was created on March 25, 2026, and is registered through Cloudflare, Inc., resolving to the IP address 172.66.44.155, which is geolocated to Canada and associated with Cloudflare’s network infrastructure. Security vendors on VirusTotal flagged the domain as malicious, with 13 out of 95 engines detecting it as a phishing threat. The domain appears on at least one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1), a common characteristic of both legitimate and malicious sites leveraging Cloudflare’s hosting services. The page title, Ledger® Live — Login, directly mimics the official Ledger Live interface, increasing the likelihood of successful deception. The current status of ldgre-logn-in.pages.dev is offline, though the infrastructure may resurface under a different domain or hosting arrangement. Organizations and individuals are advised to monitor for similar impersonation attempts, particularly those leveraging Cloudflare Pages or other content delivery networks to obfuscate origins. Network defenders should block the domain and associated IP address 172.66.44.155 at the perimeter, while end users should verify the authenticity of any Ledger-related login pages by cross-referencing official URLs and enabling multi-factor authentication. Cryptocurrency users are further cautioned to inspect SSL certificates and domain names for subtle misspellings or irregularities before entering credentials.