public-live-ledger[.]me-page[.]com

The domain public-live-ledger.me-page.com was registered on 21 February 2026 through GoDaddy.com, LLC. It resolves to the IP address 104.21.70.73, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are simone.ns.cloudflare.com and sri.ns.cloudflare.com, indicating that the domain is fully serviced by Cloudflare’s DNS and edge network. The site is currently reachable and returns HTTP status code 525, reporting a “SSL handshake failed” condition in the page title. The TLS certificate presented by the server is issued by Google Trust Services under the WE1 certificate authority. Despite the presence of a legitimate‑looking certificate, the Gridinsoft trust score for the domain is 0 out of 100, reflecting an extremely low reputation. VirusTotal analysis shows that 1 of 95 scanned security vendors flagged the domain, and the domain appears on a single public blocklist. The infrastructure also advertises support for HTTP/3, which is consistent with Cloudflare’s modern edge platform. The domain is classified as a brand‑impersonation campaign targeting the Ledger brand and is associated with cryptocurrency‑related scams. It is actively blocked by PhishDestroy, confirming that defensive feeds consider it malicious. The combination of a valid‑looking SSL certificate, Cloudflare front‑end, and a low trust score suggests an attempt to lend credibility while abusing Ledger’s brand reputation to lure victims. Defenders should add the domain and its resolving IP 104.21.70.73 to blocklists at the network perimeter and endpoint security solutions. Continuous monitoring of DNS queries for the listed nameservers can help detect additional sub‑domains that may be created under the same infrastructure. Given the recent registration date and the active blocklist entry, the threat is ongoing and should be treated as high risk until the domain is taken down or the associated infrastructure is dismantled.