web3-founders-hub-org[.]pages[.]dev

web3-founders-hub-org.pages.dev is a newly registered domain (creation date 2026-04-03) that hosts a page titled “The Web3 Ledger | Guides for Web3 Founders & Startups”. The page title references the Ledger brand, and the domain is classified as a brand-impersonation instance targeting Ledger. DNS resolution points to IP 188.114.97.3, which belongs to Cloudflare, Inc. in Canada; the domain uses Cloudflare’s authoritative name servers lamar.ns.cloudflare.com and robin.ns.cloudflare.com and presents a valid Let’s Encrypt certificate (issuer E7). The site returns HTTP 200 and has been indexed by a single security blocklist, currently listed by PhishDestroy. VirusTotal records show that 94 scanning engines have examined the URL without generating a detection, but the absence of flags does not confirm legitimacy. No additional technical artefacts such as malware payloads or credential‑stealing forms have been observed, and the content beyond the page title has not been analysed. Given the explicit brand reference, the recent registration, and the active status, defenders should treat the domain as a potential phishing vector. Recommended actions include adding the domain to network‑level deny lists, monitoring DNS queries for the host, and updating email and web filtering rules to flag any communication that mimics official Ledger branding. Continuous observation is advised until the investigation concludes.