desktop-app-ledger[.]me-page[.]com

desktop-app-ledger.me-page.com is an active domain created on 21 February 2026 and registered through GoDaddy. The domain resolves to 172.67.221.25, an IP owned by Cloudflare (AS13335) located in the United States. It is protected by Cloudflare’s infrastructure, serving HTTP/3 and presenting an HTTP 525 error with a page title of “403 Forbidden”. The SSL certificate is issued by Google Trust Services under the WE1 root. The domain appears on a single security blocklist and has been flagged by PhishDestroy. Reputation scoring from Gridinsoft is 0/100, indicating a high likelihood of malicious use. VirusTotal analysis shows that 2 of 93 security vendors have identified the domain as malicious. The site is classified as a cryptocurrency‑related brand‑impersonation campaign targeting Ledger users. Infrastructure evidence confirms the use of Cloudflare’s CDN, but the actual payload or landing page content has not been observed; only the HTTP status and title are available. Defenders should block the domain at the network perimeter, monitor DNS queries for the domain and its associated nameservers (simone.ns.cloudflare.com, sri.ns.cloudflare.com), and update endpoint protection with the current indicator set. Continuous re‑evaluation is advised in case the site becomes operational or additional detections appear.