try-ldgrwllet-hrd[.]pages[.]dev

The domain try-ldgrwllet-hrd.pages.dev has been identified as a brand impersonation threat specifically targeting Ledger, a well-known cryptocurrency hardware wallet provider. The site's page title, 'Buy Ledger Hardware Wallet | Official Secure Cold Storage Device,' clearly attempts to deceive users into believing they are on a legitimate Ledger purchase page. No drainer kit was detected, but the domain's sole purpose appears to be credential harvesting or financial fraud.

Technical indicators paint a clear picture of malicious intent. VirusTotal analysis shows 3 out of 95 security vendors flagging the domain as malicious, which, while not a high score, is significant given the domain's recent creation. The domain was registered on April 25, 2026, through Cloudflare, Inc., and resolves to IP 172.66.46.250. Its SSL certificate is issued by Google Trust Services (WE1), and it appears on one security blocklist. Notably, the domain is currently offline, suggesting it may have been taken down after detection.

As of the latest intelligence, the domain is offline, which likely means either the hosting provider or registrar responded to abuse reports. However, the risk is not entirely neutralized, as the actors behind this scam may register new domains or repurpose existing ones. Users should remain vigilant and only access Ledger's official website directly, avoiding click-throughs from emails or search ads. PhishDestroy recommends blocking this domain and monitoring for similar patterns using the unique seed 9d420a for tracking.