ofssecurityledger[.]com

The domain ofssecurityledger.com has been identified as a brand impersonation threat specifically targeting Ledger, a well-known cryptocurrency hardware wallet provider. Analysis confirms the domain was actively impersonating Ledger’s official branding, likely to deceive users into disclosing sensitive information or transferring assets under false pretenses. As of the latest assessment, the domain has been taken offline, though prior activity remains a concern for historical exposure. Technical indicators reveal the domain was flagged by 5 of 95 security vendors on VirusTotal, indicating moderate detection but sufficient evidence of malicious intent. The domain was registered on May 13, 2025, through Dynadot LLC and resolved to the IP address 107.172.61.186. It appeared on one security blocklist, specifically OISD, and received a trust score of 0/100 from Gridinsoft. Infrastructure analysis detected the use of Bootstrap, LiteSpeed, Cloudflare, Unpkg, Swiper, Smartsupp, jQuery, and cdnjs, suggesting a structured attempt to mimic legitimate web properties while leveraging common web technologies to evade basic detection mechanisms. Given the domain’s current offline status, immediate risk to users is reduced; however, organizations and individuals should remain vigilant for similar impersonation attempts. Recommendations include blocking the domain and its associated IP (107.172.61.186) at the network perimeter, monitoring for residual references in logs or communications, and educating users on verifying domain authenticity before interacting with cryptocurrency-related platforms. Historical analysis of network traffic for connections to ofssecurityledger.com is advised to assess potential prior compromise.