ledgerrlive-app[.]us

The domain ledgerrlive-app.us is identified as a brand impersonation threat targeting the Ledger brand. The site attempts to mislead users into believing it is the official Ledger Live application, which could result in the compromise of sensitive information or financial loss.

Infrastructure analysis reveals that the domain is flagged by 17 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among security professionals. The domain is registered through ENOM, INC. and resolves to the IP address 204.11.59.245, which is located in the United States under the AS46606 Unified Layer network. The domain was created on October 29, 2025, and currently does not have an SSL certificate, which is a red flag for security-conscious users. Additionally, the site appears on two security blocklists, PhishDestroy and PhishingDB, further corroborating its malicious intent.

The domain is currently offline, which suggests that it has been taken down as a precautionary measure or due to takedown efforts by security organizations. Despite this, the elevated risk level remains due to the potential for the domain to be reactivated. Users are advised to avoid accessing this domain and to verify the authenticity of any Ledger-related websites by directly visiting the official Ledger site. Security teams should monitor the domain for any signs of reactivation and consider adding it to their blocklists to mitigate the risk of future impersonation attacks.