ledgrr[.]com

The domain ledgrr.com was registered on 21 February 2026 through NameSilo, LLC and currently resolves to the IPv4 address 185.244.151.84, which is hosted by Host Sailor Ltd in Romania (ASN 60117). The site serves content over HTTPS using a Let’s Encrypt certificate and reports a page title of “CortexTranslate | Neural Real-Time Translation”. HTTP responses return status code 200 and the server stack includes LiteSpeed with HTTP/3 enabled.

Threat intelligence flags ledgrr.com as a high‑risk brand‑impersonation campaign targeting Ledger users. The site mimics legitimate Ledger branding and is associated with a cryptocurrency scam, as indicated by the “cryptocurrency” scam type label and a Gridinsoft trust score of 0 / 100. The domain appears on three external blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its malicious intent.

Observations from VirusTotal show that only one of ninety‑five security vendors flagged the domain, suggesting limited detection coverage, while the low trust score and blocklist presence provide stronger evidence of abuse. The infrastructure uses the generic hostsailor.com nameservers ns3.ro.hostsailor.com and ns4.ro.hostsailor.com, a pattern commonly seen in fast‑flux or disposable hosting used by malicious operators.

Defenders should treat any communications referencing Ledger that direct users to ledgrr.com as malicious. Network controls ought to block the domain and its IP address, and email gateways should flag URLs that resolve to this host. Continuous monitoring of the associated IP range and nameserver domain is recommended to detect potential redeployments. Incident response teams should also educate users about the authentic Ledger domains and advise verification of TLS certificates before entering credentials or cryptocurrency keys.