ledgher[.]com

This domain, ledgher.com, is flagged as an active high-risk phishing site impersonating Ledger, a cryptocurrency hardware wallet provider. Analysis indicates the domain was registered on February 21, 2026, through NameSilo, LLC, with nameservers hosted under ns3.ro.hostsailor.com and ns4.ro.hostsailor.com. The site returns an HTTP 200 status, suggesting it is fully operational, and its page title, 'VisionShop | Augmented Reality Shopping,' does not directly reference Ledger, though the scam type is explicitly classified as brand impersonation targeting Ledger. Infrastructure analysis reveals the use of LiteSpeed web server technology and Facebook Pixel, which may be employed for tracking user interactions or facilitating further malicious activity. The domain currently appears on three security blocklists and is blocked by at least three security entities, including PhishDestroy and MetaMask. Only one of ninety-five security vendors on VirusTotal flags this domain, which may indicate either a low detection rate or recent emergence. The Gridinsoft trust score of 0/100 further supports the assessment of malicious intent. The exact content and functionality of the site remain unconfirmed, as no direct analysis of the webpage has been conducted. However, given the domain's registration details, hosting infrastructure, and association with known malicious indicators, defenders should treat it as a credible threat. Organizations are advised to block access to ledgher.com at the network level and monitor for any attempts to interact with the domain, particularly from users involved in cryptocurrency transactions. Additional scrutiny of related domains using the same nameservers or registration patterns may also be warranted to identify potential secondary threats.