Unclassified // For public releaseCompany Forensics · Online Security Checked

Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://www.ledger.com/

57%

Caution advised

Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it. Passive OSINT only · inventKeys=false.

  1. High concern
  2. Elevated risk
  3. Caution advised
  4. Trusted — verify
  5. Strong protections

ledger.com security check

Public OSINT valuation for ledger.com: grade C (57/100). Title signal “Ledger Crypto Wallet - Security for DeFi & Web3”. 0 security headers present, 8 commonly expected headers missing. This is a defensive surface review — not a penetration test.

57
/100
Grade C
Caution advised

Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it.

Checked 2026-11-03T11:36:50Z · Method: automated passive checks · No attacks, no exploits

Company website · Services · Social

Company website

https://www.ledger.com/

Services & products

Social & LinkedIn

  • LinkedIn https://www.linkedin.com/company/ledgerhq
  • Facebook https://www.facebook.com/Ledger/
  • Instagram https://www.instagram.com/ledger/
  • Reddit https://www.reddit.com/r/ledgerwallet/
  • TikTok https://www.tiktok.com/@ledger
  • X (Twitter) https://twitter.com/Ledger
  • YouTube https://www.youtube.com/Ledger

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Company Forensics Online Security Checked report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for ledger.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

  • IP172.64.153.104
  • ASN—
  • Hosting—
  • Geo—
  • PTR—
  • Nameservers—
  • MX—
  • SPF—
Map pending — IP geolocation not available (inventKeys=false).
  1. Query
    ledger.comRequested hostname
  2. IP
    172.64.153.104Resolved A record
  3. ASN
    —Hosting org
  4. Trace
    ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

Domain age · domain-age-checker · vendor.domain_age

32 years, 1 month, 23 days

Veteran (10+ years)

RegistrarGandi SAS
Registered1994-09-19
Domain age32 years, 1 month, 23 days
Age bandVeteran (10+ years)
Registry / location.com registry (RDAP)

Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.

Website worth · free TLDs · age

Est. midpoint$160,987,500
Range$6,075,000 – $315,900,000
Confidencehigh
Traffic (est.)3,375,000 – 11,250,000 / mo
RPM$18–$78
MonetizationHigh

Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.

Same-name free extensions

  • ledger.site · available
  • ledger.store · available

Checked 21 TLDs for “ledger” · 8 registered · 0 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.

Highlights

Positive Highlights

  • SSL/TLS certificate validates (public handshake succeeded).
  • Final URL is served over HTTPS.
  • DNS resolves publicly (A/AAAA or equivalent).
  • TLS handshake OK (TLSv1.3).
  • Set-Cookie includes Secure and HttpOnly flags.
  • DNS resolves publicly (A/AAAA).
  • RDAP domain record available (ledger.com).
  • Domain registration age is mature (32+ years via RDAP).

Negative Highlights

  • HSTS header missing on the final HTTPS response.
  • Content-Security-Policy not observed.
  • X-Content-Type-Options missing.
  • Security header missing: strict-transport-security.
  • Security header missing: content-security-policy.
  • Security header missing: x-content-type-options.
  • Security header missing: x-frame-options.

Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.

Review Details

Company Evaluation

Registration data lists registrar “Gandi SAS”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 32 year(s) (11733 days).

Webshop Evaluation

Heuristic site-worth model (inventKeys=false) estimates midpoint value around $160,987,500 with monetization potential “High”. This is not an appraisal.

Technical Evaluation

Transport looks healthy: TLSv1.3 with certificate from Google Trust Services. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: Gandi SAS. No automated “low-trust registrar” claim is made without a verified feed.

How we scored ledger.com

Positive signals

  • TLS handshake OK (TLSv1.3).
  • Set-Cookie includes Secure and HttpOnly flags.
  • DNS resolves publicly (A/AAAA).
  • robots.txt is publicly available.
  • RDAP domain record available (ledger.com).
  • Final HTTP status 200 at https://www.ledger.com/.

Risk signals

  • HSTS header missing on the final HTTPS response.
  • Content-Security-Policy not observed.
  • X-Content-Type-Options missing.

Findings

Technical details

DNS

resolved
A
172.64.153.104, 104.18.34.152
AAAA
2606:4700:440c::ac40:9968, 2606:4700:4405::6812:2298
PTR
—
error
—

TLS / certificate

ok
version
TLSv1.3
cipher
TLS_AES_256_GCM_SHA384
issuer
Google Trust Services
notAfter
Jan 3 15:04:29 2027 GMT
SAN sample
ledger.com, *.ledger.com, *.coinradar.ledger.com
error
—

HTTP & security headers

0 present
finalUrl
https://www.ledger.com/
status
200
server
cloudflare
x-powered-by
—
present
—
missing
strict-transport-security, content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure
True
cookie HttpOnly
True

Tech fingerprint (public)

passive
title
Ledger Crypto Wallet - Security for DeFi & Web3
generator
WPML ver:4.9.7 stt:5,59,1,4,3,28,29,42,45,2,52,53;
tech
WordPress, Shopify, Cloudflare, Google Analytics
script hosts
www.ledger.com, cdn.cookielaw.org, cdn.optimizely.com
description
Secure your crypto assets such as Bitcoin, Ethereum, XRP, Monero, and more. Give yourself peace of mind by knowing that your cryptocurrencies are safe

RDAP / registration

rdap
domain
ledger.com
registrar
Gandi SAS
created
1994-09-19T04:00:00Z
expires
2027-09-18T04:00:00Z
nameservers
jason.ns.cloudflare.com, jessica.ns.cloudflare.com
status
client transfer prohibited
error
—

Public well-known

passive
/.well-known/security.txt
HTTP 403
/robots.txt
HTTP 200 · found
/security.txt
HTTP 404
Analyzed 2026-11-03T11:36:50Z CF passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com