# ledger.livesetup.io — SUSPICIOUS

> PhishDestroy identifies ledger.livesetup.io as a Ledger brand impersonation domain, created Nov 2025. 2/95 VT detections. Report & protect yourself now.

## Summary
PhishDestroy assesses ledger.livesetup.io as an elevated-risk brand impersonation campaign targeting Ledger users. The domain is likely designed to steal cryptocurrency or sensitive user data by mimicking Ledger's official website.

This domain, ledger.livesetup.io, was created on November 17, 2025, and currently resolves to IP address 216.150.1.193. VirusTotal reports a detection ratio of 2/95 security vendors flagging the domain as malicious. The domain uses a Let's Encrypt SSL certificate and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. These details, combined with the brand impersonation, suggest malicious intent.

Users should exercise extreme caution when interacting with any website resembling Ledger. Always verify the URL and SSL certificate of any Ledger-related site. Refrain from entering seed phrases or private keys on this domain (ledger.livesetup.io) or any site that raises suspicion. Report any suspected phishing attempts to Ledger's official support channels and consider using browser extensions that block known phishing domains.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registered: 2025-11-17 11:10:06
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 216.150.1.193

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3da3b2e2-de19-4c99-8f84-83d423536fc7
- PhishDestroy: https://phishdestroy.io/domain/ledger.livesetup.io/
- LLM endpoint: https://phishdestroy.io/domain/ledger.livesetup.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledger.livesetup.io/
Last updated: 2026-03-28