ledger-live[.]co[.]in

ledger-live.co.in is flagged as a brand‑impersonation site targeting the cryptocurrency platform Aave. The domain was registered on 21 February 2026 and currently resolves to the IPv4 address 193.24.123.182, which is assigned to the Russian autonomous system AS200593 operated by PROSPERO OOO. The hosting infrastructure places the server in Russia, a jurisdiction commonly used for malicious crypto‑related operations. The site presents the page title “AAVE Price Prediction: Expert Analysis and Future Forecasts,” which aligns with the declared scam type of a crypto scam and the impersonated brand Aave.

The SSL certificate presented for the site belongs to aave‑crypto.org, indicating a mismatch between the certificate’s common name and the host name, a typical indicator of fraudulent intent. VirusTotal analysis shows that 11 of 93 security vendors have flagged the domain, reinforcing the suspicion of malicious activity. Independent trust‑rating services corroborate the risk: Scamadviser assigns a trust score of 1 out of 100, and Gridinsoft rates the domain at 0 out of 100. The domain has been added to at least one security blocklist and is actively blocked by PhishDestroy, confirming that defensive feeds consider it malicious.

Its current HTTP status is offline, suggesting that the operators have taken the site down, possibly in response to takedown actions. Given the convergence of evidence—malicious IP attribution, low trust scores, vendor detections, mismatched TLS certificate, and explicit impersonation of Aave—the domain should be treated as high‑confidence malicious infrastructure. Defenders are advised to add the domain and its resolving IP address to blocklists, monitor for any re‑hosting attempts, and update intrusion‑detection signatures to capture related traffic. Continuous observation of the ASN and any new domains registered by the same registrar is also recommended to pre‑empt further brand‑impersonation campaigns.