ledger-recover[.]com

This domain, ledger-recover.com, is actively flagged as a high-risk crypto scam impersonating Ledger, a hardware wallet provider. Analysis indicates the domain was registered on February 22, 2023, through GANDI SAS and currently resolves to a Cloudflare-hosted IPv6 address (2606:4700:4407::6812:2298) within AS13335. The site returns an HTTP 301 redirect, suggesting it may be funneling visitors to another endpoint, though the destination is not yet confirmed. The page title, 'Ledger Crypto Wallet - Security for DeFi & Web3,' directly mirrors Ledger's branding, reinforcing the impersonation intent. Infrastructure review shows the domain lacks an SSL certificate, a red flag for any site handling sensitive data. It is blocked by PhishDestroy and appears on one security blocklist, with Gridinsoft assigning a trust score of 0/100. Three of 95 security vendors on VirusTotal detect the domain as malicious. Nameservers (ns-209-b.gandi.net, ns-45-a.gandi.net, ns-81-c.gandi.net) are consistent with the registrar but provide no additional attribution. Defenders should treat this domain as confirmed malicious infrastructure. Recommended actions include blocking resolution at the DNS or network level, alerting users to the impersonation risk, and monitoring for related domains using the same registrar or hosting patterns. The absence of SSL and the use of a redirect further suggest this is not a legitimate service. No evidence currently links this domain to a specific phishing kit or campaign beyond the crypto scam classification.