live-ledger-eng[.]netlify[.]app

This domain, live-ledger-eng.netlify.app, was flagged as a crypto scam impersonating Ledger, a hardware wallet provider. Analysis on July 23, 2026, indicates the domain resolved to IP 98.84.224.111, hosted on Amazon.com, Inc. infrastructure (AS14618) in the US. The page title, 'Ledger® Live: Desktop | Getting started with Ledger,' directly mimics Ledger’s official branding, reinforcing the likelihood of brand impersonation for fraudulent purposes. The domain was registered through Netlify and is currently offline, returning an HTTP 404 status.

SSL certification was issued by DigiCert Inc, a legitimate provider, which does not mitigate the domain’s malicious intent but confirms encrypted connections were possible during its active phase. Infrastructure analysis reveals the domain used Netlify’s hosting and nameservers (dns1.p04.nsone.net, dns2.p04.nsone.net), a common pattern for rapidly deployed phishing sites. At the time of assessment, 14 of 95 security vendors on VirusTotal flagged the domain as malicious, and it appeared on one security blocklist. The presence of HSTS and DigiCert technologies suggests an attempt to appear legitimate, though these are not reliable indicators of safety.

Defenders should treat this domain as high-risk for crypto-related fraud, particularly targeting users of Ledger’s software or hardware. No evidence of a specific phishing kit or additional malicious payloads is available in the current data. Organizations should block this domain at the network level and monitor for related infrastructure, such as similarly named subdomains or IPs within the same ASN, to prevent further exploitation.