ledgerchainpulse[.]com

On July 25 2026, analysis of ledgerchainpulse.com confirms the site is actively hosting a Ledger‑related crypto scam. The domain was registered on February 21 2026 through Dynadot LLC and resolves to the IPv4 address 51.75.59.39, which belongs to the OVH SAS network (AS16276) located in Poland. The hosting provider operates LiteSpeed web server software and serves the site over HTTPS using a Let’s Encrypt certificate issued to the E8 identifier, indicating a valid TLS configuration. The page title returned by the server is “Ledger Chain Pulse”, and the site advertises a crypto‑related offering consistent with the “Crypto Scam” classification in the intelligence feed. The infrastructure also includes Tailwind CSS for styling, the Smartsupp live‑chat widget, and HTTP/3 support, suggesting a relatively modern deployment.

Security‑vendor scans on VirusTotal show that four out of ninety‑three antivirus engines have raised detections for the domain, and the domain appears on a single external blocklist, reflecting modest but notable malicious reputation. PhishDestroy has already blocked the domain, and the domain’s MX record points to itself, a pattern often observed in phishing or scam operations. The nameservers ns1.extrahostpro.net and ns2.extrahostpro.net are publicly listed and do not provide additional mitigation. While the available data confirms active hosting, a valid TLS certificate, and partial detection by security vendors, no public repository of the site’s content has been captured, leaving the exact phishing page layout and credential‑capture mechanisms unverified.

Defenders should add ledgerchainpulse.com to domain blocklists, monitor DNS queries for the associated IP range 51.75.59.39/32, and enforce outbound filtering for connections to the identified nameservers. Email gateways should treat any messages originating from the domain’s MX record as suspicious.