dstp-ledgr[.]pages[.]dev

The domain dstp-ledgr.pages.dev is associated with a brand impersonation threat targeting Ledger, a well-known cryptocurrency hardware wallet provider. This domain was designed to mimic Ledger's branding in an attempt to deceive users into thinking it was legitimate. As of now, the site has been taken offline, reducing the immediate risk of further phishing attacks from this source. Users should remain cautious of similar domains that may attempt to impersonate Ledger or other trusted brands.

Technical indicators for dstp-ledgr.pages.dev include detection by 2 out of 95 security vendors on VirusTotal, specifically Kaspersky and LevelBlue. The domain was registered through Cloudflare, Inc., with a creation date of March 24, 2026, and resolves to the IP address 172.66.44.155. It is listed on one security blocklist, PhishDestroy. The SSL certificate is issued by Google Trust Services / WE1. The page title observed was 'Ledger Live Desktop — Install, Secure', which further supports the impersonation intent.

For those who may have interacted with dstp-ledgr.pages.dev, it is crucial to take immediate safety measures. If any credentials were entered, users should change their passwords, enable two-factor authentication, and monitor their accounts for unauthorized activity. Reporting such phishing attempts can be done through platforms like PhishDestroy, which already lists this domain. Staying vigilant and verifying the authenticity of websites before engaging with them can help prevent falling victim to similar scams.