ldgr-login-auth[.]pages[.]dev

This domain poses a direct threat as a brand impersonation phishing page designed to harvest Ledger wallet credentials. The site replicates the legitimate Ledger login interface, presenting users with a fraudulent portal titled 'Ledger Wallet Login | Manage Crypto Safely' to deceive victims into entering sensitive account details, including recovery phrases and private keys. Such attacks typically lead to immediate unauthorized access to cryptocurrency holdings and irreversible asset theft. Analysis indicates the domain ldgr-login-auth.pages.dev was registered on March 22, 2026, through Cloudflare, Inc., and is currently hosted on infrastructure resolving to 188.114.97.3. Security vendor detections on VirusTotal report 2 out of 95 engines flagging the domain as malicious. The domain appears on one security blocklist, specifically PhishDestroy, and maintains an active SSL certificate issued by Google Trust Services under the identifier WE1. Infrastructure review confirms the domain remains operational and accessible as of the latest verification. Users who have visited ldgr-login-auth.pages.dev or entered credentials on the site should immediately revoke any active sessions on their Ledger devices and transfer assets to a new, secure wallet. It is critical to reset all passwords associated with the compromised account and enable multi-factor authentication where available. Monitor all linked accounts for unauthorized transactions and report the incident to relevant security response teams. Avoid interacting with the domain or any links originating from it, and verify all future Ledger communications through official channels only.