wallet[.]ledger[.]org[.]nz

This domain, wallet.ledger.org.nz, presents a direct threat to cryptocurrency users by hosting a counterfeit Ledger Live wallet application download page. The site mimics the official Ledger interface, tricking visitors into downloading malicious software designed to compromise wallet credentials and execute unauthorized transactions. Analysis of the page title, 'Ledger Live · Download Official Wallet App,' confirms the intent to deceive users into believing they are accessing legitimate Ledger infrastructure, while the actual payload likely functions as a crypto drainer or credential harvester. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain resolves to IP address 43.174.247.23 and is registered through Hosting Concepts B.V T/A Openprovider, with a creation date of April 02, 2026—an anomalous timestamp suggesting domain age manipulation. VirusTotal detection metrics show 16 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The domain has been assigned a trust score of 0/100, further corroborating its fraudulent nature. Users who visited wallet.ledger.org.nz or downloaded files from this domain should assume compromise of any credentials or wallet data entered on the site. Immediate actions include revoking access to any connected cryptocurrency wallets, rotating passwords for associated accounts, and scanning the device used to access the domain with updated security tools. If cryptocurrency transactions were initiated through the site, monitor blockchain records for unauthorized transfers and report the incident to relevant financial authorities. Disconnect the affected device from networks until a full security review is completed.