cloud-desktop-ledgr-strart[.]pages[.]dev

cloud-desktop-ledgr-strart.pages.dev was registered on April 12, 2026 through Cloudflare, Inc. and resolves to the Cloudflare edge address 172.66.47.52, which is geolocated to Canada. The domain hosts a site that returns HTTP 200 and advertises the page title “Ledger Live Desktop | Secure Crypto Management”. The TLS certificate is issued by Google Trust Services / WE1 and the service enforces HSTS while supporting HTTP/3, indicating a modern Cloudflare‑fronted deployment. The infrastructure is listed on one public security blocklist and has a Gridinsoft trust score of 0 / 100. It is currently flagged by PhishDestroy and three of ninety‑four VirusTotal scanners have raised detections, consistent with the classified threat type of brand impersonation targeting the Ledger brand. The risk level is marked high and the domain remains active as of the report date. Defenders should treat any traffic to this domain as malicious, block the domain and its associated IP at perimeter and DNS filters, and monitor for related look‑alike subdomains that may use the same Cloudflare nameservers (chip.ns.cloudflare.com, zelda.ns.cloudflare.com). Because the site content has not been manually inspected, further analysis of the landing page and any credential‑capture mechanisms is recommended to confirm the exact payload. Continuous threat‑intel feeds should be consulted for additional indicators of compromise linked to this Cloudflare edge node.