ledgerlive-ledgers[.]us

ledgerlive-ledgers.us is an active cryptocurrency phishing domain that impersonates the Ledger brand. The domain is flagged as malicious by 14 out of 93 vendors on VirusTotal, indicating a significant recognition of its threat potential. PhishDestroy has also added it to its public blocklist, further underscoring its malicious nature. The domain's page title, "Account Suspended," is a common tactic used to alarm users into taking immediate action, potentially leading them to disclose sensitive information.

Registered with ENOM, INC., and hosted on IP address 162.241.85.224 in the United States, this domain is part of an infrastructure that supports fraudulent activities. The hosting is managed by Unified Layer under ASN AS46606, and the SSL certificate is issued by Let's Encrypt, a legitimate certificate authority often exploited by phishing sites to appear trustworthy.

The domain was created on February 21, 2026, and detected by PhishDestroy on February 26, 2026, highlighting the rapid deployment of this phishing scheme. With a platform risk score of 83 out of 100, ledgerlive-ledgers.us poses a high risk to potential victims. The domain's early detection by PhishDestroy showcases its ability to identify threats during the critical pre-detection window before they are widely recognized by antivirus databases. This proactive identification helps mitigate the impact of such scams on unsuspecting users.