io-legor-dsktop[.]pages[.]dev

The domain io-legor-dsktop.pages.dev has been identified as a brand impersonation site targeting Ledger, a provider of cryptocurrency hardware wallets and security solutions. Analysis indicates the domain was designed to mimic the official Ledger Live Desktop application, as evidenced by its page title, 'Ledger Live Desktop® — Manage Your Crypto™ Assets Safely,' which closely mirrors legitimate branding. The site is currently offline, but prior activity suggests it was operational for malicious purposes, likely aimed at deceiving users into disclosing sensitive information or installing malicious software under the guise of a trusted crypto management tool. Infrastructure analysis reveals the domain resolves to the IP address 172.66.47.22 and was registered through Cloudflare, Inc. on April 06, 2026. Despite its recent creation date, the domain has already been flagged by one security blocklist, specifically PhishDestroy, though it remains unflagged by VirusTotal vendors, with a detection score of 0/95. Additional technical indicators include the use of HTTP/3, HSTS, and a valid SSL certificate issued by Google Trust Services, which may have contributed to its initial appearance of legitimacy. The Gridinsoft trust score for this domain is 0/100, further corroborating its malicious classification. Current evidence suggests this domain was part of a broader campaign to exploit trust in the Ledger brand for fraudulent purposes, potentially including crypto asset theft or credential harvesting. Given its offline status, immediate threats to end-users may be mitigated; however, organizations and individuals should remain vigilant for similar impersonation attempts. Recommended actions include monitoring for related domains or IPs, implementing blocklist updates to prevent access, and educating users on verifying official sources before downloading software or entering sensitive information. Network administrators should also review logs for connections to 172.66.47.22 and investigate any potential exposure.