io-support-ldger[.]pages[.]dev

The domain io-support-ldger.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 172.66.44.60, located in the United States under ASN 13335. DNS is served by vern.ns.cloudflare.com and autumn.ns.cloudflare.com, and the site presents a Google Trust Services / WE1 SSL certificate, indicating a valid TLS chain despite the malicious intent. HTTP responses return a 403 status code, while the server advertises HSTS, Cloudflare protection, and HTTP/3 support.

The only publicly visible artifact is the page title “Ledger Live – Secure Crypto Wallet Management App Download,” which aligns with the reported scam type of wallet or seed phishing targeting users of the Ledger Live application. VirusTotal scans have flagged the domain by 10 of 93 security vendors, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. The domain appears on at least one blocklist, PhishDestroy, and is currently marked offline, though the elevated risk rating remains due to the brand‑impersonation nature of the campaign.

Defenders should add the hostname and its underlying IP to firewall allow‑lists, enforce DNS sinkholing, and monitor for any resurgence of content. Continuous checking of Cloudflare‑hosted IP ranges for similar impersonation attempts is advised, as the infrastructure can be rapidly repurposed. Incident responders should treat any connections to this domain as compromised and advise users to verify Ledger Live downloads through official channels only.