ledg-eng-support[.]pages[.]dev

This domain, ledg-eng-support.pages.dev, is flagged as an active brand impersonation threat targeting Ledger, a cryptocurrency hardware wallet provider. The domain was created on April 19, 2026, and as of July 12, 2026, it remains operational, serving a page with the title 'Ledger - Secure Crypto Hardware Wallet | Official'. Infrastructure analysis reveals it resolves to IP address 172.66.44.190, located in Canada and associated with Cloudflare, Inc., which also serves as the domain's registrar. The SSL certificate is issued by Google Trust Services (WE1), and the site responds with HTTP status 200. Security scanning on VirusTotal shows 12 out of 94 vendors flagging the domain as malicious. It appears on one security blocklist and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100. The nameservers are eve.ns.cloudflare.com and seamus.ns.cloudflare.com. Detected technologies include HSTS, Cloudflare, and HTTP/3. The exact content of the site has not been analysed in this report, and no phishing kit or specific scam category beyond brand impersonation is confirmed. Defenders should treat this domain as high-risk due to the combination of active status, Ledger brand impersonation, and low trust score. Recommended actions include blocking the domain and IP 172.66.44.190 at the network level, monitoring for any associated subdomains or related infrastructure under the pages.dev namespace, and issuing alerts to users who may have interacted with the site. The domain's use of Cloudflare may complicate takedown efforts, but reporting to the hosting provider and registrar is advised.