ledger-hq[.]com

This domain was registered on 08 May 2026 through a well‑known registrar and is served by the provider’s authoritative name servers martin.ns.cloudflare.com and tara.ns.cloudflare.com. The site presents a valid TLS certificate issued by a publicly trusted authority and resolves to 64.29.17.65, an address located in the United States. HTTP responses return a 307 redirect, and three independent security blocklists have listed the domain. VirusTotal reports three detections out of ninety‑two scanners, and a Gridinsoft trust score of 0 / 100 reinforces the malicious assessment. The page title is “Ledger”, matching the targeted brand, and the campaign is classified as credential phishing with brand impersonation. The limited public intelligence does not reveal the exact landing page content, so the full phishing payload remains unknown. Defenders should treat the domain as high‑risk, add it to deny‑list rules, and monitor DNS queries for the associated IP address. Ongoing observation is advised to capture any future changes in hosting or certificate details.