horus-ledger[.]fr

Analysis of the domain horus-ledger.fr shows it was registered on 21 February 2026 through OVH and resolves to the IPv4 address 5.135.23.164 located in France, ASN 16276 (OVH SAS). The site presents the HTML title “Site en construction” and serves a valid Let’s Encrypt certificate (E8). HTTP response code is 200. The domain is listed on three security blocklists, including PhishDestroy, MetaMask and SEAL, and appears on three additional blocklists. Gridinsoft assigns a trust score of 0/100, and four of ninety‑three VirusTotal scanners have flagged the host. The campaign targets Ledger brand users by masquerading as a Ledger‑related service and is classified as a cryptocurrency‑related brand‑impersonation. Infrastructure indicates a typical OVH‑hosted setup; no further hosting details are available. Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms because the page content has not been publicly analysed. Defenders should block the domain at DNS and proxy layers, monitor outbound connections to the IP address, and add the host to internal blacklists. Incident response teams should treat any credentials submitted to the site as compromised and advise affected users to reset Ledger authentication material. Ongoing surveillance of related OVH‑registered domains is recommended.