ledger-nl[.]net

Analysis of ledger-nl.net indicates that the domain was registered on August 8 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The site was secured with a Cloudflare TLS Issuing ECC CA 3 certificate and resolved to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. VirusTotal records show that fifteen of ninety‑three scanning engines flagged the domain as malicious, and the domain appears on one known security blocklist. PhishDestroy has taken the site offline, and the current status is reported as offline.

AlienVault OTX references the domain in thirteen separate threat‑intel pulses, reinforcing its association with malicious activity. The Gridinsoft trust score of zero out of one hundred further corroborates the lack of legitimacy. The site is categorized as a crypto‑related scam that impersonates the Ledger brand, aligning with the supplied brand target and scam type. Because the site is no longer reachable, direct behavioral analysis of its web content, page title, or login flow is unavailable; these aspects remain uncertain.

Defenders should continue to block traffic to 188.114.96.3 and add ledger-nl.net to URL filtering and threat‑intel feeds. Monitoring for reuse of the Cloudflare IP range or re‑registration of the domain is advised, as threat actors frequently recycle infrastructure. The elevated risk rating reflects the combination of brand impersonation, multiple vendor detections, and low trust score, warranting heightened vigilance for any future activity linked to this indicator.