page-ledge-desk[.]pages[.]dev

This domain, page-ledge-desk.pages.dev, is flagged as an active brand impersonation threat targeting Ledger, a hardware cryptocurrency wallet provider. Registered on April 28, 2026, through Cloudflare, Inc., the domain currently resolves to IP 172.66.44.150, hosted in Canada under Cloudflare infrastructure. The page title, 'Ledger® Live: Desktop | Getting Started with Ledgér,' explicitly mimics Ledger’s official software, Ledger Live, including a typographical alteration ('Ledgér') likely intended to evade detection or appear visually similar in phishing campaigns. The domain returns an HTTP 200 status, indicating an operational web server, and is listed on one security blocklist. Gridinsoft assigns a trust score of 0/100, reflecting high suspicion. VirusTotal reports a single detection by one of 91 security vendors, though this does not confirm malicious activity across all engines. Nameservers (edna.ns.cloudflare.com, marvin.ns.cloudflare.com) and SSL certificate (Google Trust Services / WE1) align with legitimate Cloudflare-hosted domains, but such infrastructure is frequently abused for phishing due to its accessibility and perceived trust. Defenders should treat this domain as high-risk, particularly in environments where Ledger products are used. Block or monitor connections to 172.66.44.150 and the domain, and investigate any prior interactions. The exact content of the site remains unanalyzed, but the combination of brand impersonation, recent registration, and low detection prevalence warrants immediate containment. No evidence suggests compromise of Ledger’s official systems.