ledjerlive[.]com

Analysis conducted on 22 July 2026 identifies ledjerlive.com as a brand‑impersonation infrastructure targeting Ledger. The domain was registered on 21 February 2026 through MAT BAO CORPORATION and resolves to the IP address 188.114.96.3, which belongs to AS13335 operated by Cloudflare, Inc. The hosting environment is protected by Cloudflare and serves traffic over HTTP/3; no TLS certificate was observed, indicating the site was delivered without encryption. Nameserver records point to dns‑expire1.matbao.com and dns‑expire2.matbao.com, consistent with the registrar information.

The page title returned by the server is the literal string “ledjerlive.com”, and no additional content has been captured, leaving the exact visual impersonation technique unknown. VirusTotal scans show that one of ninety‑three security vendors flagged the domain, and the site appears on a single public blocklist that has been incorporated into the PhishDestroy filtering service, which has already taken the domain offline. The combination of recent registration, use of a reputable CDN, lack of SSL, and the explicit claim to impersonate Ledger aligns with the observed brand‑impersonation pattern.

Defenders should add the domain and its resolving IP to outbound and inbound deny lists, monitor for any re‑registration or similar naming schemes, and consider reviewing DNS traffic for queries to the associated nameservers. Because the site is currently offline, active mitigation is limited to preventative blocking; continuous observation is recommended to detect any resurgence or related infrastructure.