homes-ldger-io-dwm[.]pages[.]dev

The domain homes-ldger-io-dwm.pages.dev was registered on April 17, 2026 through Cloudflare, Inc. and resolves to the Cloudflare IP address 172.66.44.99 located in Canada. Its authoritative nameservers are anirban.ns.cloudflare.com and joselyn.ns.cloudflare.com. The site serves HTTP 200 responses and employs HSTS, HTTP/3, and a Google Trust Services / WE1 TLS certificate, indicating standard Cloudflare edge protection. VirusTotal scans show six of ninety‑four security vendors flag the domain, and it appears on one external blocklist, with PhishDestroy already listing it as blocked. The page title "Getting Started — Ledger (Quick 1000‑word Presentation)" and the classification as a brand‑impersonation campaign confirm that the site is targeting Ledger users. Current intelligence does not reveal the full content of the landing page, so the exact malicious payload remains unknown. Defenders should immediately add the domain and its resolved IP address to deny‑list controls, monitor DNS queries for the associated nameservers, and consider sinkholing traffic to mitigate potential credential harvesting. Continuous re‑assessment is advised, given the active status and high risk rating.