ledgerlive[.]com[.]co

Analysis shows that the domain ledgerlive.com.co was registered on February 21, 2026 and is currently taken offline. The site presented a page titled "Ledger Live Download - Secure Crypto Wallet App | Manage 15000+ Digital Assets" and was classified as a Wallet/Seed phishing operation that impersonates the Ledger brand across multiple channels. Network resolution points to IP address 104.21.30.70, which is hosted in the United States under Autonomous System AS13335 owned by Cloudflare, Inc. The SSL certificate presented is identified as WE1, indicating a valid TLS layer despite the malicious intent.

Reputation scoring from Gridinsoft assigns a zero‑out‑of‑100 trust score, reflecting extreme malicious risk. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal analysis recorded one positive detection out of 93 scanning engines, confirming that at least one vendor flagged the domain as malicious.

No additional intelligence such as Safe Browsing, OTX, or registrar abuse details is available. Defenders should continue to block the domain and associated IP, monitor for any resurgence of the host under alternative hostnames, and enforce strict URL filtering for ledgerlive.com.co variations. Organizations using Ledger wallets should alert users to the offline status of this impersonation site and remind them to download software only from official Ledger domains.