ledger[.]com-desk[.]live

Analysis of ledger.com-desk.live as of July 29, 2026, confirms an active crypto drainer infrastructure targeting cryptocurrency users. The domain appears on one security blocklist, specifically PhishDestroy, indicating prior detection by that vendor. VirusTotal scans show 5 of 91 security vendors flagging the domain as malicious, providing concrete evidence of suspicious characteristics. No additional blocklist, Safe Browsing, or Open Threat Exchange (OTX) data is currently available for this domain, limiting visibility into broader detection trends.

Infrastructure review reveals the domain is hosted on an unidentified autonomous system, with no registrar or hosting provider details disclosed in available intelligence. SSL certificate data and HTTP response status remain unanalyzed, preventing assessment of encryption practices or server behavior. The exact content of the site is not yet analyzed, though the threat type—crypto drainer—suggests it is designed to interact with cryptocurrency wallets, potentially executing unauthorized transactions. Defenders should treat this domain as elevated risk based on existing detections.

Network-level blocking is recommended for organizations handling cryptocurrency assets. Security teams should monitor for connections to ledger.com-desk.live in logs and investigate any wallet interactions originating from this domain. Given the limited public intelligence, further analysis of SSL certificates, hosting infrastructure, and on-page behavior is advised to refine detection and mitigation strategies.