ledgerliveapp[.]us

This domain, ledgerliveapp.us, is actively impersonating the official Ledger Live application platform to conduct credential harvesting attacks targeting cryptocurrency wallet users. The site presents a fraudulent download page titled 'Ledger Live - Download Official Ledger Live App,' designed to deceive users into entering sensitive wallet credentials, recovery phrases, or installing malicious software under the guise of legitimate Ledger software. The threat specifically exploits trust in the Ledger brand to facilitate unauthorized access to cryptocurrency assets, with potential for direct financial theft or subsequent malware deployment. Analysis indicates the domain was registered on April 08, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, and resolves to IP address 43.174.246.23, hosted on autonomous system AS139341 in Singapore. The infrastructure lacks basic security measures, including the absence of an SSL certificate, increasing exposure to man-in-the-middle interception. Security vendor detection is significant, with 8 out of 95 engines on VirusTotal flagging the domain as malicious. The domain appears on three independent security blocklists and is actively blocked by multiple threat intelligence feeds, including PhishDestroy, MetaMask, and SEAL. Users who have visited ledgerliveapp.us or interacted with its content should immediately cease all engagement and assume credential compromise. Any entered recovery phrases, passwords, or private keys must be considered exposed and invalidated. Affected users should transfer assets from potentially compromised wallets to new, secure wallets using a clean device. System scans for malware are recommended, particularly for any downloaded files from the domain. Ledger users are advised to verify application authenticity exclusively through the official ledger.com domain and enable multi-factor authentication where available. Monitoring for unauthorized transactions and reporting the incident to relevant cryptocurrency security resources is strongly advised.