enablefeature-ledger[.]com

enablefeature-ledger.com has been assessed as a high-risk domain for brand impersonation. This type of threat specifically aims to deceive users into believing they are interacting with the legitimate Ledger brand, potentially leading to credential theft, financial loss, or malware distribution.

Analysis indicates that this domain was registered through NiceNIC International Group Co., Limited on February 21, 2026. It resolves to the IP address 144.31.194.193, which is located in Germany and is associated with AS199785 Cloud Hosting Solutions, Limited. The domain does not possess an SSL certificate, which is a significant red flag indicating a lack of secure connection. Furthermore, enablefeature-ledger.com appears on three security blocklists and has been flagged by 10 out of 95 security vendors on VirusTotal, suggesting a moderate to high level of suspicion. The domain is also blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the assessment of it being a brand impersonation threat.

To mitigate the risks posed by this domain, users should remain vigilant and avoid clicking on any links or entering credentials on websites that appear to be impersonating legitimate brands. Organizations should update their security blocklists to include enablefeature-ledger.com and educate employees about the signs of brand impersonation scams. Additionally, network administrators can implement DNS filtering and web proxies to block access to this domain, ensuring that users within the network do not inadvertently visit it.