ledgerlivewallet[.]co[.]com

The domain ledgerlivewallet.co.com is identified as a brand impersonation phishing site targeting Ledger, a cryptocurrency hardware wallet provider. Analysis indicates this domain was designed to mimic the official Ledger Live application, likely to harvest user credentials or distribute malicious payloads under the guise of secure crypto management. The domain is currently offline, but prior activity suggests it was actively used for fraudulent purposes. Technical indicators confirm the malicious nature of this domain. It is flagged by 10 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0 out of 100. The domain was registered on March 29, 2026, through Moniker Online Services LLC, a registrar frequently associated with high-risk domains. It resolves to the IP address 43.174.247.50, which has been linked to other phishing campaigns. Additionally, the domain appears on one security blocklist, further corroborating its classification as a threat. The page title, 'Ledger Wallet (Ledger Live) - Secure Crypto Management App,' closely mirrors legitimate branding to deceive users. As of the latest assessment, ledgerlivewallet.co.com has been taken offline, reducing immediate risk to users. However, the infrastructure and registration details suggest potential for re-emergence under a similar guise. Organizations and individuals are advised to block the domain and its associated IP address at the network level. Users who may have interacted with this domain should immediately revoke any credentials or wallet access permissions granted during the interaction. Monitoring for similar domains registered through Moniker Online Services LLC or resolving to the same IP range is recommended to preempt further threats. Cryptocurrency users should verify the authenticity of any Ledger-related domains by cross-referencing with official sources before entering sensitive information.