ladger-wallet-auth[.]pages[.]dev

This report analyzes the domain ladger-wallet-auth.pages.dev, which was identified as a cryptocurrency scam site. The page title, "Ledger Wallet — Security for Your Device," indicates the site impersonated the legitimate Ledger brand to deceive users into believing it was a genuine wallet authentication service. The primary threat posed was credential harvesting or cryptocurrency theft, targeting users by mimicking a trusted hardware wallet interface.

Technical evidence confirms the fraudulent nature of this domain. VirusTotal analysis shows 3 out of 95 security vendors flagged the site as malicious, with detections from Fortinet, LevelBlue, and Phishing Database, and it appeared on 1 blocklist. The domain was registered through Cloudflare, Inc., created on September 23, 2025, and hosted on IP address 188.114.97.3, located in Canada and belonging to CloudFlare, Inc. SSL certificates were issued by Google Trust Services (WE1), and nameservers were felicity.ns.cloudflare.com and nadia.ns.cloudflare.com. GridinSoft assigned a trust rating of 0 out of 100.

The domain is currently offline or down. The DOM risk score of 61 out of 100, combined with the low trust rating and multiple vendor flags, indicates a high risk level for users who may have interacted with the site. Even though the site is no longer accessible, the threat of similar impersonation domains remains active.