mmaledger[.]pages[.]dev

This domain, mmaledger.pages.dev, is currently under investigation for brand impersonation targeting Ledger, a recognized hardware wallet provider. The site presents itself as "MMA Ledger | MMA Judging Analytics and Controversy Tracker," a title unrelated to the impersonated brand, suggesting an attempt to mislead users through thematic diversion. Infrastructure analysis indicates the domain remains active and unflagged by most security vendors. Infrastructure details reveal the domain was registered through Cloudflare, Inc. on April 6, 2026, and resolves to the IP address 188.114.96.3, located in Canada and associated with Cloudflare’s network. As of the latest assessment, the domain has not been flagged by any of the 95 vendors on VirusTotal, though it appears on one security blocklist. The SSL certificate is issued by Let’s Encrypt (serial number E7), a common provider for both legitimate and malicious domains. The page title and hosting provider align with tactics used to evade detection while maintaining operational persistence. Current status remains active, with no confirmed takedown or mitigation measures observed. Organizations are advised to block the domain at the DNS or proxy level, particularly in environments where Ledger-related assets are managed. Network administrators should monitor for connections to 188.114.96.3 and inspect SSL certificates with the serial number E7 for potential misuse. Given the domain’s recent creation and lack of widespread detection, proactive hunting for related indicators is recommended to prevent potential credential harvesting or malware distribution.