trade-ldgerr-apps[.]pages[.]dev

Analysis of the domain trade-ldgerr-apps.pages.dev indicates a confirmed crypto scam impersonating Ledger, a well-known cryptocurrency wallet provider. The domain was registered on March 23, 2026, through Cloudflare, Inc., and currently resolves to the IP address 172.66.44.134, hosted in Canada under Cloudflare’s infrastructure. Nameservers dolly.ns.cloudflare.com and matias.ns.cloudflare.com further confirm Cloudflare as the hosting provider. The SSL certificate is issued by Google Trust Services (WE1), and the domain enforces HSTS and HTTP/3 protocols, typical of modern phishing infrastructure designed to appear legitimate.

The page title, 'Ledger Live App – Official Crypto Wallet for Desktop,' explicitly targets Ledger’s brand, aligning with the scam type classified as a crypto scam. As of July 22, 2026, the domain has been taken offline, returning an HTTP 403 status. Detection data remains limited but notable: three of 94 security vendors on VirusTotal flagged the domain, and it appears on one security blocklist. PhishDestroy has also blocked the domain, while Gridinsoft assigns it a trust score of 0/100, indicating high risk.

Defenders should note that while the domain is currently inactive, its infrastructure and registration details suggest a deliberate attempt to deceive users. The use of Cloudflare’s hosting and SSL services may have been intended to evade detection, though the domain’s inclusion on blocklists and low detection counts highlight its eventual identification. Organizations are advised to monitor for similar domains leveraging Cloudflare Pages or analogous hosting services, particularly those mimicking cryptocurrency brands. No further content analysis is available, as the domain is offline and no archived captures have been reviewed.