support-ldgersslive-org[.]aura[.]build

The domain support-ldgersslive-org.aura.build was registered on February 21, 2026 through Name.com, Inc. and is currently resolved to the IPv4 address 35.157.26.135, which is hosted in Germany under ASN 16509 belonging to Amazon.com, Inc. The site returns HTTP 200 and serves a TLS certificate from Let’s Encrypt (CN E7) with HSTS enabled, indicating that transport‑layer security is enforced. Page metadata shows the title "support-ldgersslive-org | Aura" and the underlying stack includes Netlify, jsDelivr, Google Analytics, and standard web‑hosting headers. Security‑vendor observations note a Gridinsoft trust score of 0 / 100, and VirusTotal reports that two of ninety‑three scanned engines flagged the domain, reinforcing the malicious classification.

The domain appears on one external blocklist and has been explicitly blocked by PhishDestroy, yet it remains active as of the report date. The identified scam type is a Tech Support Scam, consistent with the domain’s naming pattern and the presence of support‑related keywords. Defenders should immediately add the fully qualified domain name to DNS‑based blocklists and firewall deny lists, and consider blacklisting the associated IP address 35.157.26.135, especially for traffic destined for German infrastructure.

Monitoring of Netlify‑hosted assets and any outbound connections to jsDelivr or Google Analytics endpoints from internal hosts can help detect inadvertent data exfiltration. Given the low trust score and the fact that multiple security vendors have flagged the site, organizations are advised to treat any unsolicited contact referencing this domain as malicious and to educate users about the Tech Support Scam narrative. Continuous re‑evaluation is recommended, as additional detections or changes in hosting could alter the threat posture.