ask-wallt-trzr[.]pages[.]dev

The domain ask-wallt-trzr.pages.dev is currently active and resolves to the IP address 172.66.46.250, which is hosted by Cloudflare in Canada. The site is served through Cloudflare Pages and was registered on June 09, 2026. The TLS certificate is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS connection. An HTTP request returns a 200 status code and the page title reads "Ledger Live Desktop — Modern Secure Crypto Manager," directly referencing the Ledger brand. Security telemetry shows the domain appears on a single blocklist (PhishDestroy) and has a Gridinsoft trust score of 0 out of 100, reflecting a high‑confidence malicious classification. VirusTotal analysis reports that 12 of 91 security vendors flag the domain, reinforcing the suspicion of brand impersonation. The infrastructure is typical of a cloud‑hosted phishing site, leveraging reputable CDN services to obscure origin and improve availability. Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms employed, as no page content analysis is available. Defenders should prioritize immediate blocking of the domain at perimeter firewalls and DNS filters, add the IP address 172.66.46.250 to threat‑intel feeds, and monitor outbound connections for any attempts to contact this host. Continuous scanning of the domain for changes in content or additional detections is advised, and incident response teams should treat any user reports of Ledger‑related login prompts as potentially compromised.