ledgeren[.]live

This domain, ledgeren.live, was registered on February 21, 2026 through Name.com, Inc. The site currently returns an HTTP 301 response and presents a page title identical to the domain name. It is hosted on Google Cloud infrastructure (AS396982 Google LLC) and resolves to IP address 34.111.179.208 located in the United States. The server advertises Google Cloud CDN and HTTP/3 support, indicating a modern content delivery configuration. The TLS certificate is issued by Let’s Encrypt (E8) and is valid for the domain, providing encrypted transport but not mitigating the underlying malicious intent. The domain is listed on one security blocklist and is actively blocked by the PhishDestroy feed.

VirusTotal analysis shows that three of ninety‑three scanning engines have flagged the host, reinforcing the suspicion of abuse. The domain is classified as a crypto‑scam that impersonates the Ledger brand, aligning with the provided brand target. No additional page content has been publicly analysed; the page title is the sole visible indicator. Infrastructure analysis confirms that the four authoritative name servers – ns1cny.name.com, ns2ckr.name.com, ns3jkl.name.com, and ns4hny.name.com – are also hosted on the same provider, suggesting a single‑operator deployment.

The combination of a recent registration date, active blocklist status, and targeted brand impersonation elevates the risk to high. Defenders should add ledgeren.live to URL filtering and DNS blocklists, monitor traffic to the associated IP range, and enforce strict certificate validation. Continuous re‑scanning with multi‑vendor services is advised to capture any evolution of the payload. Incident response teams should treat any credential or wallet information submitted to this domain as compromised.