ledger--live[.]com

This domain, ledger--live.com, is actively flagged as part of a crypto drainer phishing infrastructure. Registered on June 10, 2026, through NameSilo, LLC, the domain appears on at least one security blocklist, specifically PhishDestroy, indicating prior detection by defenders. Analysis of detection vendor data reveals that 18 out of 91 security vendors on VirusTotal have flagged this domain as malicious, suggesting a coordinated effort to distribute crypto-draining malware or harvest credentials associated with cryptocurrency wallets.

The domain's registration details and detection patterns align with known tactics used in crypto drainer campaigns, where attackers impersonate legitimate cryptocurrency services to deceive users into connecting their wallets to malicious smart contracts. While the exact content of the site remains unconfirmed, the presence of the domain on multiple detection platforms and its classification as a crypto drainer threat justify elevated risk mitigation measures. Defenders should prioritize blocking this domain at the network level, particularly in environments where cryptocurrency-related activity is common.

Monitoring for associated IP addresses, SSL certificates, or hosting infrastructure may reveal additional linked domains or campaigns. Given the domain's recent registration and active status, continuous monitoring for changes in detection status or infrastructure is recommended to preempt further exploitation attempts.