faq-lede-com[.]pages[.]dev

The domain faq-lede-com.pages.dev was registered on 2026-04-30 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 172.66.47.22 located in Canada. DNS resolution uses the Cloudflare nameservers max.ns.cloudflare.com and tricia.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 authority, and the HTTP response returns status 200 with HSTS and HTTP/3 enabled. The page title observed is “💠 Ledger Start | Next-Gen Wallet Setup 🚀 | Official Site”, indicating a brand‑impersonation attempt targeting Ledger. Gridinsoft assigns a trust score of 0/100, and the domain appears on a single security blocklist, currently blocked by PhishDestroy. VirusTotal analysis shows the domain has been scanned by 91 vendors with no detections at the time of review. Infrastructure analysis reveals no additional hosting or C‑name redirection beyond the Cloudflare front‑end. While the content of the page has not been inspected, the combination of a recent registration, low trust score, brand‑specific title, and active blocklist listing supports a classification of active brand‑impersonation risk. Defenders should add the domain to URL filtering rules, monitor DNS queries for the associated IP and nameservers, and consider broader blocking of the entire pages.dev sub‑domain space pending further investigation. Ongoing observation is required to determine if the site begins serving credential‑harvesting forms or other malicious payloads.