hub-dgr-live-wallet[.]webflow[.]io

The domain hub-dgr-live-wallet.webflow.io is currently active and poses a high risk of brand impersonation, specifically targeting the Ledger brand. The page title associated with this domain is "Ledger® Live* : Desktop | Most Secure Crypto Wallet (webflow)", which clearly indicates an intent to mislead users into believing they are interacting with a legitimate service. Infrastructure analysis reveals that this domain resolves to the IP address 172.64.151.8 and is registered through MarkMonitor, Inc., a service typically used for legitimate corporate domain registration, which raises concerns regarding the security oversight of this registration.

The domain appears on one security blocklist and has been flagged by 15 out of 95 security vendors on VirusTotal, indicating a significant number of security concerns associated with it. Additionally, a trust score of 0/100 from Gridinsoft further underscores its high-risk status. The SSL certificate is issued by Google Trust Services, which may mislead users into thinking the site is secure, although SSL validation alone does not guarantee legitimacy. The domain was created on May 08, 2013, and has remained active since then, suggesting long-term malicious use.

Given the current intelligence, it is advised that defenders closely monitor for any phishing attempts or fraudulent communications that reference this domain. Organizations should educate users about the risks of interacting with such domains and implement email filtering solutions that can block incoming communications from this domain. Continuous monitoring of security blocklists for updates related to this domain is also advisable to stay ahead of any emerging threats. The active status and historical context of this domain indicate a persistent threat that requires ongoing vigilance.