io-ledgrr[.]pages[.]dev

This domain, io-ledgrr.pages.dev, was registered on 27 Oct 2025 through Cloudflare Pages and currently resolves to the Cloudflare‑owned address 172.66.46.227 located in Canada. The site returns HTTP 200, uses a TLS certificate issued by Google Trust Services (WE1), enforces HSTS and supports HTTP/3, indicating a modern web stack. The page title "Ledger Beginner’s Guide | Easy Crypto Security Setup" and the declared brand target of Ledger confirm a brand‑impersonation campaign. VirusTotal reports 11 of 91 scanners flagging the domain, and the Gridinsoft trust score is 0/100. The domain appears on one security blocklist and is already blocked by PhishDestroy. The risk level is high and the status remains active. No additional artifacts such as malicious payloads or credential‑stealing forms have been disclosed, so the exact malicious functionality is uncertain. Defenders should block DNS resolution to 172.66.46.227, monitor for any HTTP requests to the domain, and add the domain to perimeter security blocklists. Continuous re‑scanning is advised to detect any changes in malicious behavior.