comstrtledger-access[.]square[.]site

This domain, comstrtledger-access.square.site, poses a significant threat of brand impersonation, specifically targeting users of Ledger, a well-known cryptocurrency hardware wallet provider. The domain attempts to deceive visitors by mimicking the official Ledger website, potentially leading to unauthorized access to personal and financial information, installation of malware, or financial loss.

Infrastructure analysis reveals that the domain is registered through MarkMonitor, Inc. and was created on February 21, 2026. It resolves to an IP address (74.115.51.4) located in the United States, associated with AS27647 Weebly, Inc. The domain is flagged by 18 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion among security experts. Additionally, the domain appears on one security blocklist, further emphasizing its potential threat. The SSL certificate is issued by Let's Encrypt, which is a common certificate authority but does not necessarily indicate legitimacy in this context.

If users have visited this domain, they should immediately check their Ledger accounts for any unauthorized activity. It is recommended to change all related passwords and enable two-factor authentication (2FA) if not already in place. Users should also monitor their financial statements for any suspicious transactions and consider running a full system scan for malware. Reporting the incident to Ledger's official support channels and local cybersecurity authorities is advised to ensure timely assistance and to help prevent further spread of the threat.