ledgar-co-start[.]pages[.]dev

This domain ledgar-co-start.pages.dev is currently active and hosts a page titled “Ledger Security Center – Protect Your Keys”. The page title and the classification as a brand‑impersonation campaign indicate that the site is intended to masquerade as an official Ledger resource. The domain was registered on May 01 2026 through Cloudflare, Inc. and is served via Cloudflare’s network (nameservers brianna.ns.cloudflare.com and syeef.ns.cloudflare.com). DNS resolution points to IP 188.114.96.3, which belongs to Cloudflare, Inc. in Canada. HTTPS is provided by a Google Trust Services certificate (WE1) and the site supports HSTS, HTTP/3, and Cloudflare security features. VirusTotal analysis shows nine of ninety‑one scanners flag the domain, and it appears on one external blocklist and has been flagged by PhishDestroy. The Gridinsoft trust score is 0/100, reinforcing the malicious assessment. No further content analysis is available beyond the page title, so the exact malicious payload or credential‑collection mechanism remains unknown. Defenders should block the domain at the DNS and proxy layers, monitor for outbound connections to the associated IP, and add the domain to internal threat‑intel feeds. Users should be warned that any unsolicited communications referencing Ledger security services that direct to this domain are likely fraudulent. Continuous observation of the domain’s activity is advised, as the infrastructure could be reused for additional campaigns.