soft-ledger[.]live

The domain soft-ledger.live was registered on 13 October 2025 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently resolved to the IPv4 address 45.82.82.240, which belongs to AS9123 JSC TIMEWEB in Russia. No TLS certificate is presented for the domain, indicating that connections are unencrypted. The site’s page title, “Ledger Live App – Download & Setup Desktop & Mobile App,” explicitly references the Ledger brand, confirming a brand‑impersonation intent.

Reputation services show a Gridinsoft trust score of 0 / 100, and VirusTotal reports that 13 of 95 security vendors have flagged the domain as malicious. The domain appears on four public blocklists and has been actively blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. Nameserver configuration uses a.dnspod.com and c.dnspod.com.

The site is presently taken offline, limiting immediate observation, and no SSL certificate or HTTPS enforcement is available for further analysis. Defenders should add the IPv4 address 45.82.82.240 to network‑level deny lists, monitor for any re‑hosting of the same content under different domains, and ensure that endpoint protection solutions are updated to reflect the 13 vendor detections. Continued surveillance of the registrar and associated name servers is advised to detect potential repurposing of the infrastructure for future Ledger‑related impersonation campaigns.