home-un-ldgre[.]pages[.]dev

This domain is an active brand impersonation attempt targeting Ledger, a hardware cryptocurrency wallet provider. The site displays the page title 'Ledger Start - Secure Your Crypto,' mimicking the legitimate Ledger onboarding process to deceive users into entering sensitive information such as recovery phrases, private keys, or personal credentials. Such attacks are commonly used to gain unauthorized access to cryptocurrency wallets, leading to financial theft and irreversible asset loss. Analysis indicates the domain was registered on April 20, 2026, through Cloudflare Pages, a platform often used for rapid deployment of web content. Infrastructure analysis reveals the site resolves to the IP address 188.114.97.3, located in Canada and associated with Cloudflare, Inc. Despite its deceptive appearance, the domain currently shows 0 detections out of 95 security engines on VirusTotal, suggesting it has not yet been widely flagged. However, it appears on one security blocklist, indicating early detection by at least one threat intelligence source. Users who have visited home-un-ldgre.pages.dev or entered any information on the site should take immediate action. Disconnect the device from the internet to prevent potential data exfiltration. Do not interact with any prompts or download any files from the site. If cryptocurrency wallet credentials were entered, transfer assets to a new, secure wallet immediately using a trusted device. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to relevant security teams and consider notifying local cybersecurity authorities for further guidance.