ledger-live[.]com[.]pl

The domain ledger-live.com.pl is currently active and classified as high‑risk brand‑impersonation targeting Ledger. The site was registered on 2026-02-21 via the NASK registrar and is hosted behind Cloudflare (ASN 13335) at IP 104.21.56.53, located in the United States. TLS is provided by a ZeroSSL ECC Domain Secure Site CA certificate. DNS resolution uses six Polish‑style nameservers (a-dns.pl, b-dns.pl, d-dns.pl, f-dns.pl, h-dns.pl, j-dns.pl). VirusTotal reports that 13 of 93 security engines flag the domain, indicating suspicious activity, and the domain appears on two public blocklists, currently blocked by PhishDestroy and Enkrypt. The page title observed is "10 Hidden Features in Ledger Live You Need to Know," confirming a Ledger brand reference. No further content analysis is available, so the exact credential‑harvesting mechanisms remain unknown. Defenders should block the domain at perimeter filters, monitor DNS queries for the listed nameservers, and enforce strict outbound controls to prevent connections to the associated Cloudflare IP. Continuous intelligence gathering is advised to detect any evolution of the payload or credential‑stealing pages that may be added under this infrastructure.