ledgerlive[.]to

The domain ledgerlive.to was registered on June 04, 2025 through Spaceship, Inc. and resolves to the IPv4 address 178.16.54.12, which is hosted in the Netherlands under autonomous system AS202412 owned by Omegatech LTD. The site presents a page title identical to the domain name (ledgerlive.to) and does not provide an SSL certificate, indicating that HTTPS is not available. Analysis of threat intelligence sources shows that the domain is classified as a crypto‑related brand impersonation campaign targeting Ledger, and it is explicitly listed as a "Crypto Scam" in the provided data. Fourteen of ninety‑five security vendors on VirusTotal flagged the domain, confirming malicious detection across multiple scanners.

The domain appears on a single security blocklist and has been referenced in one AlienVault OTX pulse, demonstrating that it has been observed in threat‑intel feeds. Additional defensive products have taken action: PhishDestroy has blocked the domain and Gridinsoft assigns it a trust score of 0 out of 100, indicating a high confidence of abuse. The site is currently offline, and its status is recorded as taken offline.

While the page content has not been examined directly, the combination of brand impersonation, lack of TLS, low trust score, multiple vendor detections, and inclusion on blocklists provides strong evidence that ledgerlive.to was used for fraudulent activity aimed at Ledger users. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the associated IP address, and update endpoint and web‑filtering solutions with the indicator set (domain, IP, and related OTX pulse). Ongoing vigilance is advised for any residual traffic or attempts to resurrect the domain, given its recent creation date and observed malicious behavior.