ledger-live-wind[.]io

The domain ledger-live-wind.io was registered on July 12 2026 through TLD Registrar Solutions Ltd. DNS delegation points to the name servers a.dnspod.com, b.dnspod.com and c.dnspod.com, and resolution yields a single IPv4 address 104.207.93.52. The host presents a valid Let’s Encrypt YR1 TLS certificate, and an HTTP GET returns status code 200 with the page title “Website ledger-live-wind.io is ready. The content is to be added”. No additional page content has been observed at the time of analysis. The domain is classified as a crypto_drainer and is currently marked active with a risk level of under_investigation. These indicators suggest a newly provisioned infrastructure that aligns with recent malicious campaigns targeting cryptocurrency users, where attackers often employ freshly registered domains, legitimate‑looking certificates, and ready‑to‑serve web servers to host phishing pages or malicious payloads. The precise malicious functionality remains uncertain because the site currently returns only a placeholder title and no further payload has been captured. Defensive recommendations include adding ledger-live-wind.io and its resolved IP address 104.207.93.52 to URL filtering and firewall block lists, monitoring DNS queries for the three dnspod.com name servers, and integrating the domain into threat intelligence feeds. Continuous re‑assessment is advised, as future content updates or changes to the HTTP response or certificate could reveal additional malicious activity.