download-ledger-live[.]info

Analysis of the domain download-ledger-live.info, observed on July 23, 2026, shows that the site was registered on February 21, 2026 and is currently offline. The domain resolves to the IP address 104.21.27.69, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The SSL certificate presented is identified as WE1, but no further validation details are available. The page title returned from the host is “Download Ledger Live – Secure Your Crypto Portfolio,” and the threat profile lists Apple as the impersonated brand, while the scam type is recorded as a tech‑support scam. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service.

Gridinsoft assigns a trust score of zero out of one hundred, indicating an extremely low reputation. VirusTotal analysis shows that two of ninety‑three scanning engines flagged the domain as malicious, confirming the presence of at least some suspicious activity. The limited detection footprint, combined with the low trust score and blocklist presence, suggests that the site was used to lure victims with a fabricated Ledger Live download page that pretended to be associated with Apple, possibly to harvest credentials or install unwanted software under the guise of technical support. Because the site is no longer reachable, dynamic content cannot be verified, and the exact payload or credential‑capture mechanisms remain unknown.

Defenders should continue to block the IP address 104.21.27.69 and add download‑ledger‑live.info to local and network‑level deny lists. Monitoring for any re‑registration of the domain or for similar brand‑impersonation patterns targeting Apple users is recommended. Users should be warned that any unsolicited request to download Ledger Live or to engage with Apple‑related technical support from this domain is fraudulent.