com[.]ledgerlive[.]info

This domain, com.ledgerlive.info, poses a direct threat to users of Ledger hardware wallets by impersonating the official Ledger Live interface. The site is designed to deceive visitors into entering sensitive credentials, recovery phrases, or private keys, which attackers could then exploit to drain cryptocurrency wallets or gain unauthorized access to accounts. The domain mimics the legitimate Ledger brand with high precision, using a similar naming convention to trick users who may overlook subtle differences in the URL. Analysis indicates this is a deliberate malicious operation. The domain was registered on October 14, 2025, through Hosting Concepts B.V. d/b/a Registrar.eu, and currently resolves to the IP address 45.82.82.240, hosted in Russia under AS9123 JSC TIMEWEB. It lacks an SSL certificate, a red flag for any site handling sensitive data. Security vendors on VirusTotal have flagged this domain at a concerning rate, with 17 out of 95 engines detecting it as malicious. Additionally, the domain appears on one security blocklist and was previously blocked by PhishDestroy, further confirming its fraudulent nature. If you visited com.ledgerlive.info or entered any information on the site, immediate action is required. First, disconnect any devices that were connected to the site and revoke any permissions granted to unknown applications. Next, transfer any cryptocurrency assets from potentially compromised wallets to new, secure wallets with fresh recovery phrases. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where possible. Finally, report the incident to your local cybercrime authority and consider filing a complaint with the domain registrar, Hosting Concepts B.V., to aid in further investigation and takedown efforts.