home-ledgrlogn[.]pages[.]dev

This domain, home-ledgrlogn.pages.dev, poses as an official Ledger wallet login portal to deceive users into entering their recovery phrases or private keys. Analysis indicates the site is designed to capture sensitive cryptocurrency credentials, enabling attackers to drain victims' digital assets. The page title, 'Ledger® Login | Secure Access to Your Wallet,' closely mirrors legitimate Ledger branding, increasing the likelihood of successful deception among unsuspecting users. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.181, located in Canada. The domain was created on April 09, 2026, though this date may reflect a falsified registration record. VirusTotal detections show that 7 out of 95 security vendors flag the domain as malicious, while one security blocklist has already listed it. The SSL certificate is issued by Google Trust Services, a common tactic to lend an appearance of legitimacy to phishing sites. Users who have visited home-ledgrlogn.pages.dev or entered credentials on the site should immediately revoke access to any connected wallets and transfer remaining assets to a new, secure wallet. Enable multi-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. If recovery phrases or private keys were exposed, consider the compromised wallet permanently at risk. Report the domain to relevant security teams and avoid interacting with any further communications claiming to be from Ledger unless verified through official channels.