ledgerme[.]info

This domain, ledgerme.info, is identified as a brand impersonation threat specifically targeting Ledger, a well-known cryptocurrency hardware wallet provider. Analysis indicates the domain hosts content designed to deceive users into believing they are interacting with legitimate Ledger services, likely aiming to harvest credentials or facilitate unauthorized transactions. The page title, Fundd., suggests an attempt to mimic financial or fund-related platforms, a common tactic in crypto-focused phishing campaigns. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 5 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. It appears on one security blocklist and resolves to the IP address 147.135.76.157. The domain was registered on April 14, 2026, through Dynadot Inc, a registrar frequently associated with malicious domains. Gridinsoft assigns it a trust score of 0/100, further corroborating its malicious nature. At the time of analysis, the domain was not listed in Google Safe Browsing (GSB) databases, which may explain its initial evasion of some automated detection systems. As of the latest assessment, ledgerme.info has been taken offline, reducing immediate exposure to end users. However, the infrastructure remains a latent risk, as the domain and associated IP could be reactivated or repurposed for future campaigns. Users who may have interacted with this domain are advised to revoke any connected wallet permissions, rotate credentials, and monitor accounts for unauthorized activity. Organizations should ensure this domain and its resolving IP are added to internal blocklists to prevent future access attempts.