edge-ledger-website[.]pages[.]dev

The domain edge-ledger-website.pages.dev was registered on 30 April 2026 and currently resolves to the Cloudflare‑owned address 188.114.97.3, geolocated to Canada. The site serves content over HTTPS using a Google Trust Services certificate issued by WE1 and enforces HSTS. Page metadata reports the title “EdgeLedger Financial | Accounting & InvestmentS”, suggesting a financial‑themed landing page. Detected libraries include jQuery, Google Maps, Google Hosted Libraries, Google Analytics and HTTP/3 support, all typical of publicly hosted sites. The infrastructure is protected by Cloudflare (nameservers bryce.ns.cloudflare.com and mira.ns.cloudflare.com) and is listed on a single security blocklist; PhishDestroy has already blocked the domain. The Gridinsoft trust score is 0 / 100, indicating a high likelihood of malicious use. The campaign is classified as a brand‑impersonation attack targeting Ledger, but no payload, credential‑capture page, or phishing form has been publicly disclosed. Consequently, the precise attack vector remains unknown. Defenders should continue to block the domain at network perimeter, monitor DNS queries for the host, and watch for any new indicators such as credential‑submission endpoints or malware payloads associated with the same IP range. Ongoing investigation should focus on capturing the landing page content and any outbound traffic to identify the full scope of the impersonation campaign.