web-ledz-logn-cloud[.]pages[.]dev

This domain, web-ledz-logn-cloud.pages.dev, is actively engaged in brand impersonation targeting Ledger, a recognized hardware wallet provider. The site presents itself as an official Ledger login portal, currently operational and accessible. The threat type is classified as high-risk brand impersonation, designed to deceive users into disclosing sensitive credentials or financial information. Analysis indicates the domain was flagged by 2 of 95 security vendors on VirusTotal, suggesting limited but existing detection. It was registered through Cloudflare, Inc., with a creation date of March 29, 2026, and resolves to the IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services (WE1), providing a superficial layer of legitimacy. The domain appears on one security blocklist, reinforcing its suspicious nature. The page title, 'Secure – Ledger Login official access,' mimics official branding to enhance credibility. Current infrastructure analysis reveals the domain remains active, posing an ongoing risk to users. Organizations and individuals are advised to block access to this domain at the network level and update endpoint protection rules to include its IP address. Users should verify the authenticity of any Ledger-related login portal by cross-referencing the URL with official sources. If credentials were entered on this site, immediate password resets and account reviews are recommended. Monitoring for unauthorized transactions or account modifications is critical.