ledger-wallet-secure-app[.]com

The domain ledger-wallet-secure-app.com was registered on March 06, 2026 through Hello Internet Corp and points to the IP address 104.21.83.124, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution uses the Cloudflare nameservers howard.ns.cloudflare.com and meadow.ns.cloudflare.com. No TLS certificate is presented, so the site does not offer HTTPS. An HTTP request to the host returns a 404 Not Found page title, indicating that no landing page is currently served.

The domain is flagged as a brand‑impersonation attempt targeting Ledger, and the associated scam type is identified as a crypto scam. It has been taken offline and is listed on a single security blocklist; PhishDestroy has already blocked it. VirusTotal analysis shows that 12 of 95 scanning engines flagged the domain as malicious, providing additional corroboration of its threat nature.

While the infrastructure details—Cloudflare hosting and the lack of SSL—are clear, the exact malicious payload or phishing page content remains unknown because the site is offline and no page content was captured. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑appearance of the same host or IP, and consider adding the IP address 104.21.83.124 to reputation‑based deny lists. Ongoing vigilance is advised, especially for users of Ledger products, to prevent exposure to potential crypto‑theft campaigns that may reuse this infrastructure.