moto-ledger[.]pages[.]dev

This domain, moto-ledger.pages.dev, is under investigation for brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. Registered on April 21, 2026, through Cloudflare, Inc., the domain currently resolves to IP 172.66.47.119, hosted in Canada under Cloudflare's infrastructure. Analysis reveals a Gridinsoft trust score of 0/100, and the domain appears on one security blocklist, specifically PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), a common configuration for Cloudflare-hosted pages. The page title, 'The Bikes | Motorcycle Parts Archive,' does not align with the expected content for a Ledger-related site, suggesting either misdirection or an attempt to obscure the domain's true purpose. While the domain returns an HTTP 200 status, indicating an active and accessible page, no malicious detections were reported by the 94 vendors that scanned it on VirusTotal. However, the absence of detections does not confirm safety, as phishing infrastructure often evades initial scans. Infrastructure analysis indicates the domain uses Cloudflare nameservers (clay.ns.cloudflare.com and sydney.ns.cloudflare.com), a common tactic to leverage Cloudflare's CDN and obfuscate the origin server. Defenders should treat this domain as suspicious due to its brand impersonation classification, low trust score, and presence on a security blocklist. Further investigation is required to determine the exact nature of the content hosted and whether it includes credential harvesting, malware distribution, or other malicious activity. Organizations should consider blocking or monitoring access to this domain pending additional analysis.