# lebger.co.com — SUSPICIOUS

> lebger.co.com mimics Ledger brand in a low-risk phishing attempt. Stay cautious and avoid entering sensitive info on this active site.

## Summary
PhishDestroy identifies lebger.co.com as an active brand impersonation phishing domain targeting Ledger users. The threat level is assessed as low based on current detection and risk indicators, but users should remain vigilant when interacting with this site.

This domain was registered on March 11, 2026, through Moniker Online Services LLC and resolves to the IPv6 address 2606:4700:3034::6815:4288. The page title "Ledger Live Crypto Wallet App | Ledger" aims to deceive visitors into believing this is an official Ledger platform. Although only 2 out of 95 security vendors flagged the domain on VirusTotal, it appears on three security blocklists, reinforcing suspicion of malicious intent. The use of a slightly misspelled domain name (lebger instead of ledger) is a common tactic to trick users into divulging sensitive information.

PhishDestroy recommends avoiding lebger.co.com and similar suspicious URLs that mimic well-known cryptocurrency brands. Despite being flagged with low risk, the domain remains active and capable of deceiving less cautious users. It is advisable to verify URLs carefully and only use official Ledger channels for wallet management. Continued monitoring and blocking efforts should be maintained to minimize potential harm from this impersonation attempt.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Target brand: Ledger
- Page title: Ledger Live Crypto Wallet App | Ledger

## Domain Intelligence
- Registered: 2026-03-11 17:07:02
- Registrar: Moniker Online Services LLC
- Country: US
- IP: 2606:4700:3034::6815:4288
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["ns1.nic.co.com", "ns2.nic.co.com", "ns3.nic.co.com", "ns4.nic.co.com"]
- SSL Issuer: Let's Encrypt / R12

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["ADMINUSLabs", "ESET"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ceb93-d433-75cf-b565-1b8e341f07eb.png
- PhishDestroy: https://phishdestroy.io/domain/lebger.co.com/
- LLM endpoint: https://phishdestroy.io/domain/lebger.co.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/lebger.co.com/
Last updated: 2026-03-19