home-ledgge-en[.]pages[.]dev

This domain, home-ledgge-en.pages.dev, is flagged for brand impersonation targeting Ledger, a hardware cryptocurrency wallet provider. Analysis indicates the site mimics the official Ledger Live login interface, presenting a page titled 'Ledger® Live — Login & Getting Started | Getting Started Guide.' The threat type is classified as credential theft, with potential secondary risks including cryptocurrency wallet compromise or malware distribution. No explicit crypto drainer kit signatures were detected in initial scans, but the infrastructure aligns with known phishing campaigns targeting cryptocurrency users. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 13, 2026, with resolution to IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services, and the site employs HSTS and HTTP/3 protocols. As of the latest scan, VirusTotal reports 0 detections out of 95 engines, indicating low immediate detection rates. However, the domain appears on one security blocklist and holds a Gridinsoft trust score of 0/100, reinforcing its malicious classification. No entries were found in Google Safe Browsing at the time of analysis. The domain is currently offline, likely taken down following detection or manual review. Despite its inactive status, residual risk remains due to potential reuse of the infrastructure or re-registration under a similar domain pattern. Users who interacted with this domain are advised to revoke any active sessions, rotate credentials, and monitor associated cryptocurrency wallets for unauthorized transactions. Organizations should update blocklists to include this domain and its resolved IP to prevent future access attempts. Continuous monitoring of Cloudflare Pages subdomains with similar naming conventions is recommended for early detection of recurring threats.