live-en-ldeger[.]teachable[.]com

The domain live-en-ldeger.teachable.com was identified as a brand impersonation threat targeting Ledger, a popular hardware wallet provider. This phishing domain is designed to mimic the legitimate Ledger Live platform, attempting to trick users into revealing their cryptocurrency wallet credentials. As of the latest analysis, the domain has been taken offline, but its recent activity underscores the persistent risk of such scams.

Technical analysis reveals that the domain was registered on February 21, 2026, through Amazon Registrar, Inc., and resolves to IP address 104.17.83.54. It uses an SSL certificate issued by Google Trust Services (WR3). VirusTotal flagged this domain as malicious by 2 out of 95 security vendors, and it appears on 1 security blocklist. The page title was observed as "Ledger Live* | Getting started | Ledger," further indicating its deceptive intent. Despite a relatively low detection rate, the domain's specific impersonation of Ledger and its targeted nature elevate the risk level to elevated.

Given that the domain is now offline, the immediate threat is mitigated; however, users should remain vigilant. PhishDestroy recommends verifying any communication claiming to be from Ledger directly through official channels. Never click on links in unsolicited messages or emails, and always double-check URLs for subtle misspellings or variations. For any suspicious domains encountered, report them to PhishDestroy for further analysis and to help protect the community.