ledger-live[.]de[.]com

This domain, ledger-live.de.com, is flagged as a brand impersonation threat targeting Ledger, a hardware cryptocurrency wallet provider. Infrastructure analysis reveals no direct evidence of a cryptocurrency drainer kit, though the page title—RED88 - red88 ads - Trang Chủ Red 88 Trực Tuyến Mới Nhất 2026—suggests unrelated gambling content, potentially masking malicious intent. The domain was registered to deceive users seeking Ledger’s official wallet management software, Ledger Live, by mimicking its branding and subdomain structure.

Technical indicators confirm low initial detection rates but emerging risk signals. VirusTotal reports 0 out of 95 security vendors flagging the domain as malicious. The domain was registered on March 28, 2026, through Instra Corporation Pty Ltd. and resolves to the IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services, a common tactic to appear legitimate. While Google Safe Browsing has not yet flagged the domain, it appears on one security blocklist, and Gridinsoft assigns it a trust score of 0 out of 100, indicating high suspicion.

As of the latest assessment, ledger-live.de.com has been taken offline, likely in response to detection by PhishDestroy. However, the infrastructure remains a potential risk. The domain’s recent creation date, use of a legitimate-looking SSL certificate, and impersonation of a trusted brand suggest it was designed for short-term phishing campaigns. Users who interacted with the domain should verify wallet integrity, monitor for unauthorized transactions, and report any suspicious activity to relevant security teams. Remaining risk includes the possibility of the domain resurfacing under new hosting or being repurposed for similar attacks.