ledger[.]tahirx[.]com

This domain, ledger.tahirx.com, was observed hosting a page titled “TahirX Ledger Pro” and is classified as a crypto‑scam that impersonates the Ledger brand. The domain was registered on 21 February 2026 through HOSTINGER operations, UAB and resolves to the IP address 82.25.106.53, which is announced by AS47583 Hostinger International Limited and geolocated to India. No SSL certificate is present, and the HTTP service is currently offline. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or parking‑service infrastructure.

VirusTotal analysis shows that one of ninety‑three security vendors flagged the domain, indicating at least a single detection of malicious behavior. The domain appears on a single security blocklist and is listed as blocked by PhishDestroy. The combination of brand‑specific page title, crypto‑scam classification, and hosting on a known hosting provider suggests a deliberate attempt to lure Ledger users into fraudulent activity, likely by presenting a counterfeit Ledger service.

However, the offline status limits immediate observation of the site’s content, and the lack of SSL prevents verification of any HTTPS‑based indicators. Defenders should add ledger.tahirx.com to URL filtering and endpoint blocking rules, monitor DNS queries for the domain and its associated nameservers, and consider the IP 82.25.106.53 as a suspicious host for related traffic. Continuous re‑evaluation is advised in case the domain becomes active again, and any future HTTP responses should be captured for deeper content analysis.