ledgrlive[.]live

This domain, ledgrlive.live, is flagged as a brand-impersonation phishing site targeting Ledger, a manufacturer of cryptocurrency hardware wallets. Analysis indicates the domain was designed to mimic legitimate Ledger recovery or wallet management pages, likely to harvest seed phrases, private keys, or login credentials from unsuspecting users. The presence of a generic "Just a moment..." page title suggests either a placeholder, a cloaking mechanism, or an incomplete deployment, though historical captures may reveal active phishing content. No specific drainer kit has been confirmed, but the domain aligns with known crypto-phishing infrastructure patterns. Infrastructure analysis reveals the domain was registered on February 27, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious domains. It resolves to the IP address 188.114.97.3, which has been linked to other phishing campaigns. VirusTotal reports 5 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is currently blocked by at least one threat intelligence feed. No Google Safe Browsing (GSB) detections are recorded at this time, though this may reflect a lag in propagation rather than benign status. As of the latest assessment, ledgrlive.live has been taken offline, likely due to registrar enforcement or hosting provider action. Despite its inactive status, the domain remains a residual risk due to potential DNS cache persistence or re-registration by threat actors. Users who interacted with the domain prior to takedown should assume credential exposure and take immediate remediation steps, including revoking wallet access, rotating passwords, and monitoring for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP address, while Ledger users should verify all recovery phrases and device authenticity through official channels only.