ledger-live-connects[.]org

This domain, ledger-live-connects.org, is flagged as an active crypto scam impersonating Ledger, a hardware wallet provider. Registered on February 21, 2026, through Shinjiru Technology Sdn Bhd, the domain currently resolves to 188.114.97.3 (AS13335, Cloudflare, Inc.) with nameservers audrey.ns.cloudflare.com and leonidas.ns.cloudflare.com. Infrastructure analysis reveals the use of Cloudflare services, including Cloudflare Browser Insights and HTTP/3, which may obscure origin details and complicate takedown efforts. The SSL certificate is issued by Google Trust Services (WE1), a common choice for both legitimate and malicious domains. The domain appears on three security blocklists and is blocked by multiple detection systems, including PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0/100, further indicating malicious intent. While the page title is currently '404 Not Found,' this does not rule out active or intermittent malicious use, as the domain remains operational with an HTTP 302 redirect status. VirusTotal reports 16 of 93 security vendors flagging the domain, though the absence of additional context limits the interpretability of this metric. Defenders should treat this domain as high-risk, particularly for crypto-related fraud targeting Ledger users. The use of Cloudflare infrastructure and the domain's registration history suggest persistence in malicious activity. Recommended actions include blocking the domain at the DNS or network level, monitoring for related subdomains or IP associations, and alerting users to potential phishing attempts leveraging this infrastructure. The exact content or functionality of the site is not yet analyzed, but the available indicators align with known crypto scam patterns.