new-l-ivqe-ledge[.]pages[.]dev

The domain new-l-ivqe-ledge.pages.dev was registered on April 30, 2026 through Cloudflare, Inc. and resolves to the Cloudflare IP address 172.66.44.66. The site delivers HTTP status 200 over TLS with a certificate issued by Google Trust Services / WE1, and employs HSTS and HTTP/3. Page metadata shows the title "Ledger Live | Secure Crypto Wallet & Portfolio Manager", directly referencing the Ledger brand. Threat intelligence classifies the infrastructure as a brand‑impersonation campaign targeting Ledger users. VirusTotal reports that three of ninety‑one scanners flagged the domain, and it is listed on one security blocklist. PhishDestroy has already blocked the domain, while Gridinsoft assigns a trust score of 0/100, indicating a high likelihood of malicious intent. The domain is currently active, and no additional technical artifacts such as malicious payloads or credential‑stealing forms have been disclosed. Analysts should treat the domain as hostile, enforce network‑level blocking, add it to URL filtering and threat‑intel feeds, and monitor for any related domains or IPs that share the same Cloudflare nameservers (albert.ns.cloudflare.com, dina.ns.cloudflare.com). Continued observation is advised to capture any future changes in content or infrastructure.