center-ledgr-login[.]pages[.]dev

The domain center-ledgr-login.pages.dev is flagged as a brand impersonation threat, specifically targeting users of the Ledger cryptocurrency wallet. The site impersonates the official Ledger login page, potentially to steal user credentials and access to cryptocurrency accounts.

Analysis indicates that the domain has been flagged by 11 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, which is located in California, USA. The domain was created on March 26, 2026, and is currently listed on one security blocklist, PhishDestroy. The site's SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users.

The domain is currently offline, and actions have been taken to mitigate the threat. However, the offline status does not eliminate the risk entirely, as the domain could be reactivated at any time. Users are advised to verify the URL and SSL certificate of any Ledger login page they visit and to report any suspicious activity to Ledger's official support channels. Security professionals should monitor the domain for any signs of reactivation and continue to educate users about the risks of brand impersonation attacks.