lederlive[.]zapier[.]app

This analysis covers the domain lederlive.zapier.app, classified as a brand impersonation operation targeting the cryptocurrency hardware wallet brand Ledger. The infrastructure is assessed as an elevated-risk threat and is currently reported as offline. The observed page title "Login to Ledger®" indicates intent to simulate a legitimate authentication portal and likely capture sensitive user credentials or seed phrases.

Technical telemetry shows the domain was created on June 12, 2026 and registered via Name.com, Inc. DNS resolution identifies IP address 64.239.109.193. The domain is flagged by 15/95 VirusTotal security vendors and appears on 1 known security blocklist. Trust scoring analysis reports a Gridinsoft trust score of 0/100, indicating severe reputational degradation. The infrastructure leverages multiple web and security technologies including Amazon Web Services, Vercel, Stripe, reCAPTCHA, HSTS, and Amazon S3, which may be used to simulate legitimacy and evade detection.

At present, the domain is taken offline, limiting active user exposure. However, historical indicators confirm prior malicious intent consistent with credential harvesting or crypto asset theft workflows. The combination of low trust score, multi-vendor detection, and brand impersonation strongly supports classification as a targeted phishing campaign. Recommended mitigation includes blocking the domain and associated IP, monitoring for cloned deployments under similar subdomains, and strengthening user awareness controls against fake Ledger login prompts.