ledger-live[.]pw

PhishDestroy assesses ledger-live.pw as an active brand-impersonation threat under investigation, posing a high risk to cryptocurrency users seeking Ledger Live downloads. The domain is specifically designed to mimic Ledger’s legitimate services and harvest wallet credentials or private keys, resulting in potential financial loss. This domain was flagged on VirusTotal with 0 detections out of 95 scanners, is registered via PDR Ltd. d/b/a PublicDomainRegistry.com, resolves to IP 43.174.229.91, and holds an SSL certificate issued by TrustAsia Technologies, Inc. The domain was created on May 10, 2026, indicating it is very new and likely part of a rapid campaign. Despite no current blocklist entries, the absence of detections and fresh registration timeline suggest it is actively evading detection. To mitigate this threat, users should avoid visiting ledger-live.pw entirely and verify any Ledger-related links directly through ledger.com. Enable multi-factor authentication on Ledger accounts and use official desktop or mobile applications only. Report the domain to security teams and update browser blocklists to prevent future visits.