support-ledgr-hub[.]pages[.]dev

The domain support-ledgr-hub.pages.dev was registered on March 22, 2026 and resolves to the Cloudflare‑owned address 172.66.47.26, a location associated with Cloudflare, Inc. in Canada. The domain is hosted behind Cloudflare’s edge network and presents HSTS and HTTP/3 support, indicating modern TLS configuration. The SSL certificate presented is issued by Google Trust Services under the WE1 designation, confirming a valid certificate chain, but this does not mitigate the observed malicious intent. The site’s page title, "Ledger Live Desktop - Secure Crypto Management," explicitly references Ledger’s brand, and the intelligence categorises the operation as a crypto‑related scam that impersonates Ledger.

The domain was flagged by PhishDestroy and appears on a single security blocklist, confirming that at least one external threat‑intel source has taken action against it. Gridinsoft assigns a trust score of 0 / 100, reflecting a high confidence in the domain’s malicious nature. VirusTotal records indicate that the domain was scanned by 94 vendors, with no detections reported at the time of scanning; this lack of detections should not be interpreted as an assurance of safety. HTTP requests to the domain returned a 403 status, and the domain is currently taken offline, suggesting that the malicious content has been removed or the hosting has been terminated.

Defenders should continue to block the domain at perimeter and DNS layers, monitor for any resurgence of the same hostnames or similar Cloudflare‑based IPs, and watch for new domains that reuse the "support-ledgr-hub" naming pattern. Given the confirmed brand impersonation and the low trust score, organizations using Ledger services should alert users to the possibility of credential‑stealing attempts that reference Ledger Live Desktop, and enforce multi‑factor authentication on associated accounts.