support-boost-ledger-live[.]pages[.]dev

The domain support-boost-ledger-live.pages.dev is identified as a brand impersonation threat specifically targeting Ledger, a well-known cryptocurrency hardware wallet provider. Analysis confirms the domain was actively impersonating official Ledger support channels to deceive users into disclosing sensitive credentials or transferring assets. As of the latest assessment, the domain has been taken offline, though prior activity indicates a high-risk profile for users who may have interacted with it. Infrastructure analysis reveals the domain was flagged by 12 of 95 security vendors on VirusTotal, indicating widespread detection as malicious. The domain was registered through Cloudflare, Inc., and resolved to the IP address 172.66.44.200. The creation date of April 03, 2026, suggests an attempt to appear legitimate through a future-dated registration, a tactic often employed to evade immediate scrutiny. Additional technical indicators include a Gridinsoft trust score of 0/100, presence on one security blocklist, and a page title explicitly labeling it as a suspected phishing site. The SSL certificate was issued by Google Trust Services, which, while not inherently malicious, is frequently leveraged in phishing campaigns to create a false sense of security. The current status of the domain is offline, mitigating immediate risk to users. However, the infrastructure and tactics observed warrant heightened vigilance. Users who accessed the domain are advised to immediately revoke any connected wallet permissions, rotate credentials for associated accounts, and monitor for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP address. Given the elevated risk level, continuous monitoring of similar domains using the Ledger brand name is recommended to prevent further exploitation.