ledgr-live-s[.]zapier[.]app

The domain ledgr-live-s.zapier.app has been identified as a high-risk phishing threat, specifically engaging in brand impersonation targeting the legitimate entity Ledger. This domain was created on March 6, 2026, and remains active as of the reporting date of July 12, 2026. The page title 'Download Ledger Live' suggests an attempt to mislead users into downloading possibly malicious software under the guise of legitimate services. Analysis of the domain reveals that it is currently resolving to the IP address 64.239.109.1.

In terms of security assessments, the domain has been flagged by 14 out of 95 security vendors on VirusTotal, indicating a significant level of concern among the cybersecurity community. Additionally, the domain has a Gridinsoft trust score of 0 out of 100, reflecting a complete lack of trustworthiness. The domain has also been listed on four separate security blocklists, which include PhishingArmy, PhishDestroy, OISD, and BLP-Malware. These blocklists provide further evidence of the domain's malicious intent and its recognition within cybersecurity frameworks.

The domain is registered through Name.com, Inc., a registrar that is often involved in the registration of potentially malicious domains. The SSL certificate for this domain is issued by Let's Encrypt, which is commonly utilized by legitimate sites but can also be misused by malicious actors to lend an air of credibility. It is crucial that defenders remain vigilant as the phishing landscape evolves, and this domain exemplifies the tactics employed by cybercriminals to exploit brand trust.

Given the high risk associated with ledgr-live-s.zapier.app, it is recommended that users and organizations implement strict email and web filtering policies to block access to this domain. Continuous monitoring and threat intelligence sharing could also enhance defensive measures against ongoing phishing campaigns targeting similar brands and tactics.