cash-ledger[.]com

The domain cash-ledger.com has been identified as a brand impersonation threat specifically targeting Ledger, a well-known cryptocurrency hardware wallet provider. Analysis indicates this domain is designed to deceive users into believing they are interacting with legitimate Ledger services. As of the latest verification, the domain has been taken offline, though prior activity suggests malicious intent. Infrastructure analysis reveals the domain was registered on May 04, 2025, through GMO Internet, Inc. It resolved to the IP address 35.71.142.77 and was hosted on servers running Nginx and OpenResty. Security assessments show the domain was flagged by 2 of 95 vendors on VirusTotal and appeared on at least one security blocklist. The Gridinsoft trust score for this domain was 0 out of 100, reinforcing its classification as high-risk. The page title associated with the domain was 'Atlas,' which may have been used to further the deception. Given the domain's current offline status, no active threat is present. However, organizations and individuals should remain vigilant for similar impersonation attempts. It is recommended to monitor network logs for connections to 35.71.142.77 or related domains, block the domain at the DNS level, and educate users about the risks of brand impersonation in the cryptocurrency space. If prior interactions with this domain occurred, affected parties should review account activity and consider resetting credentials associated with Ledger or other crypto-related services.