ledgerr-desktop-us[.]pages[.]dev

The domain ledgerr-desktop-us.pages.dev is a phishing site involved in brand impersonation targeting the cryptocurrency brand Ledger. It posed a scam threat by attempting to deceive users into believing it was affiliated with Ledger. The site has been taken offline and is currently under investigation for its malicious activity. Despite its removal, users encountering ledgerr-desktop-us.pages.dev should consider it unsafe and a potential scam.

Technical analysis shows the domain was registered on September 11, 2025, through Cloudflare, Inc., and resolves to the IP address 104.21.16.1 located in the United States under AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. The domain appears on one security blocklist, PhishDestroy, but has not been detected by any of the 95 VirusTotal vendors. The site employed technologies such as HSTS, Cloudflare, and HTTP/3, and when accessed, returned an HTTP 403 status with a page titled 'Suspected phishing site | Cloudflare.' Its Gridinsoft trust score is 0 out of 100.

Users who may have interacted with ledgerr-desktop-us.pages.dev should take precautions typical for brand impersonation phishing scams involving cryptocurrency. This includes changing passwords associated with Ledger accounts, enabling two-factor authentication, and monitoring accounts for unauthorized activity. It is advisable to report the phishing attempt to security blocklists like PhishDestroy and to relevant authorities to help prevent further victimization. Since the site is offline, avoid any further interaction with the domain to stay safe.