esignaltrade[.]live

The domain esignaltrade.live was identified as a brand impersonation threat targeting Ledger, a cryptocurrency hardware wallet provider. Analysis indicates the domain was designed to deceive users into believing they were interacting with legitimate Ledger services, potentially facilitating credential harvesting or crypto asset theft. The domain is currently offline, though its prior activity warrants further scrutiny. Infrastructure analysis reveals the domain resolved to the IP address 163.61.188.89 and was registered through MIT (ASN: 153658). At the time of assessment, the domain had not been flagged by any of the 95 vendors on VirusTotal, yielding a detection score of 0/95. Gridinsoft assigned a trust score of 0/100, and the domain appeared on one security blocklist. The page title was recorded as 'Home,' which aligns with common phishing tactics to mimic generic landing pages of legitimate services. Current findings confirm the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to monitor network logs for connections to 163.61.188.89 and the domain esignaltrade.live. Blocking the domain and associated IP at the perimeter is recommended as a preventive measure. Users who accessed the site should verify their systems for unauthorized access or installed malware and reset credentials for any accounts linked to Ledger or cryptocurrency services.