ledgerco[.]in

This domain, ledgerco.in, is flagged for high‑risk brand impersonation targeting Ledger. The site presents the page title “Ledger & Co.” and is classified under a cryptocurrency‑related scam type. Infrastructure analysis shows the domain is hosted behind Cloudflare (AS13335) with the origin IP 185.158.133.1 located in Poland. DNS is served by GoDaddy’s default nameservers ns75.domaincontrol.com and ns76.domaincontrol.com. The site enforces HSTS, uses a Let’s Encrypt certificate (E7) and includes a Calendly widget, indicating possible appointment‑booking abuse. The domain was registered on 20 June 2025 through GoDaddy.com, LLC and currently resolves with HTTP 200. Reputation services report a Gridinsoft trust score of 0 / 100 and one security vendor on VirusTotal flagged the domain out of ninety‑five scans. PhishDestroy has already added ledgerco.in to its blocklist, and it appears on a single public blocklist. No direct analysis of the page content is available, so the exact malicious payload or credential‑capture mechanisms remain unknown. Defenders should block the domain at network perimeter, add it to local threat‑intel feeds, and monitor for any related C2 activity. Continuous re‑scanning with multiple AV engines is advised to capture evolving detections.