ledger-live-connects[.]com

This investigation documents the domain ledger-live-connects.com, which was registered on February 21 2026 and is currently reported as offline. The site was identified as a Ledger brand impersonation used to deliver a crypto‑scam campaign. Analysis of public threat‑intel sources shows that 11 of 93 security vendors on VirusTotal flagged the domain as malicious, indicating a consensus of concern among scanners.

The domain is listed on one security blocklist and received a Gridinsoft trust score of 0 out of 100, reflecting an extremely low reputation. PhishDestroy has already added the domain to its blocklist, further confirming its malicious intent. The only explicit categorisation available is “Crypto Scam”, which aligns with the Ledger brand targeting observed in the intelligence.

No additional infrastructure details such as hosting IP, ASN, or SSL certificate information are presently disclosed, and the page title or content has not been publicly analysed, leaving those aspects uncertain. Defenders should ensure that the domain is explicitly denied at perimeter and DNS filtering layers, update endpoint and web‑gateway reputation feeds with the latest blocklist entries, and monitor for any resurgence or re‑registration attempts. Given the low trust score, vendor detections, and confirmed blocklist presence, the domain should be treated as high‑confidence malicious until further evidence suggests otherwise.