partnership-ledgerlive[.]com

The domain partnership-ledgerlive.com is flagged as a brand‑impersonation site targeting Ledger users. Registration data shows the domain was created on 5 January 2026 through NiceNIC International Group Co., Limited, and it resolves to the Cloudflare address 104.21.50.181, which is associated with AS13335 (Cloudflare, Inc.) and located in the United States. The authoritative nameservers are margot.ns.cloudflare.com and nero.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No TLS certificate is presented, meaning the site does not provide HTTPS encryption, a common characteristic of fraudulent landing pages.

The page title returned from the last known snapshot is “Ledger Live Dashboard,” directly referencing Ledger’s official product and confirming the impersonation intent. Security‑vendor analysis on VirusTotal shows that 20 of 93 scanners flagged the domain, providing multi‑engine corroboration of malicious intent. Additional threat intelligence sources reinforce this assessment: the site appears on one security blocklist, is blocked by PhishDestroy, and has been included in a single AlienVault OTX pulse. Gridinsoft assigns a trust score of 0 out of 100, reflecting a worst‑case reputation rating.

The domain is currently taken offline, so live content cannot be verified, but the existing indicators sufficiently demonstrate a crypto‑scam profile that masquerades as a Ledger Live interface. Defenders should immediately add partnership‑ledgerlive.com to outbound‑web filtering and DNS blocklists, and monitor for any new domains registered with the same registrar or using similar “ledgerlive” naming patterns. Given the shared Cloudflare IP space, broader IP‑based blocking is not advisable; instead, focus on domain‑level controls and heuristic detection of brand‑impersonation cues such as missing TLS, low trust scores, and suspicious page titles.