New Registrations

Ledger phishing domains

Newly registered lookalikes - tracked daily


Ledger phishing domains

Newly registered lookalikes - tracked daily


Tracked (7d)
15
New (24h)
5
vs avg
About
AIHardware-wallet phishing. Pages typically impersonate 'Ledger Live' to capture the recovery seed phrase, sometimes paired with a fake firmware-update or device-replacement lure after a real Ledger data breach.
TLDs
.com (10) · .org (4) · .help (1)
Countries
United StatesUnited States (7) · The NetherlandsThe Netherlands (4) · CyprusCyprus (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) URL Screenshot Flags Details
2026-08-13 02:14 2026-08-13 02:14
https://ledgreowl.com
Screenshot of ledgreowl.com Details
2026-08-13 02:14 2026-08-13 02:14
https://ledgreaccountingsolutions.com
Screenshot of ledgreaccountingsolutions.com Details
2026-08-13 01:38 2026-08-13 01:38
https://en-ledger-live.com
Screenshot of en-ledger-live.com Details
2026-08-12 01:42 2026-08-12 01:42
https://ledgerwalletfixer.com
Screenshot of ledgerwalletfixer.com Details
2026-08-12 01:42 2026-08-12 01:42
https://ledger-liveapp.com
Screenshot of ledger-liveapp.com Details
2026-08-10 02:00 2026-08-10 02:00
https://my-ledger-live.org
Screenshot of my-ledger-live.org Details
2026-08-10 01:52 2026-08-10 01:52
https://ledgerlive-setup.com
Screenshot of ledgerlive-setup.com Details
2026-08-09 03:03 2026-08-09 03:03
https://v2-ledgerlive.com
Screenshot of v2-ledgerlive.com Details
2026-08-09 02:15 2026-08-09 02:15
https://ledgerlivenow.com
Screenshot of ledgerlivenow.com Details
2026-08-08 03:20 2026-08-08 03:20
https://v1-ledgerlive.org
Screenshot of v1-ledgerlive.org Details
2026-08-08 02:30 2026-08-08 02:30
https://ledger-wallet.help
Screenshot of ledger-wallet.help Details
2026-08-07 02:30 2026-08-07 02:30
https://ledger-live-v2.org
Screenshot of ledger-live-v2.org Details
2026-08-07 02:27 2026-08-07 02:27
https://ledger-live-ledger.org
Screenshot of ledger-live-ledger.org Details
2026-08-06 02:00 2026-08-06 02:00
https://ledger-live-sas.com
Screenshot of ledger-live-sas.com Details
2026-08-06 01:59 2026-08-06 01:59
https://ledger-live-new.com
Screenshot of ledger-live-new.com Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://ledgreowl.com
Screenshot of ledgreowl.com Details
https://ledgreaccountingsolut…
Screenshot of ledgreaccountingsolutions.com Details
https://en-ledger-live.com
Screenshot of en-ledger-live.com Details
https://ledgerwalletfixer.com
Screenshot of ledgerwalletfixer.com Details
https://ledger-liveapp.com
Screenshot of ledger-liveapp.com Details
https://my-ledger-live.org
Screenshot of my-ledger-live.org Details
https://ledgerlive-setup.com
Screenshot of ledgerlive-setup.com Details
https://v2-ledgerlive.com
Screenshot of v2-ledgerlive.com Details
https://ledgerlivenow.com
Screenshot of ledgerlivenow.com Details
https://v1-ledgerlive.org
Screenshot of v1-ledgerlive.org Details
https://ledger-wallet.help
Screenshot of ledger-wallet.help Details
https://ledger-live-v2.org
Screenshot of ledger-live-v2.org Details
https://ledger-live-ledger.org
Screenshot of ledger-live-ledger.org Details
https://ledger-live-sas.com
Screenshot of ledger-live-sas.com Details
https://ledger-live-new.com
Screenshot of ledger-live-new.com Details

AIHow to verify a real Ledger URL

  • Legitimate Ledger URLs always end in ledger.com (e.g. www.ledger.com, account.ledger.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Ledger.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Ledger has owned ledger.com for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open ledger.com from your browser bookmark or type the domain manually.
  • Real Ledger pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.