ledgerlinehub[.]com

The domain ledgerlinehub.com was registered on September 11, 2025 through GANDI SAS and is currently offline. Infrastructure analysis shows the domain resolves to IP address 72.60.177.24, which is owned by Hostinger International Limited (AS47583) and geolocated in Germany. No TLS certificate is present, indicating traffic would be unencrypted if the site were active. The domain is listed on a single security blocklist and has been flagged by PhishDestroy as a Crypto Scam targeting the Ledger brand.

Page metadata contains the title "LedgerLineHub - Buchhaltung Schweiz | Kurse & Services," which does not directly reference Ledger but is consistent with a brand‑impersonation attempt. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting a lack of legitimacy. VirusTotal analysis reports a single positive detection out of 95 scanning engines, confirming at least one vendor has identified malicious behavior associated with the domain. Nameserver configuration uses three Gandi‑provided authoritative servers (ns-146-a.gandi.net, ns-227-b.gandi.net, ns-82-c.gandi.net).

The evidence confirms the domain is crafted to impersonate Ledger, yet no additional artifacts such as phishing pages, credential harvesters, or malware drops have been publicly disclosed. Uncertainty remains regarding the exact malicious payload or user‑facing content, as the site is offline and no sample pages have been captured. Defenders should continue to block ledgerlinehub.com at perimeter defenses, monitor DNS queries for the associated IP and nameservers, and add the domain to internal threat‑intel feeds. Ongoing observation of any re‑activation attempts is recommended, and any future traffic should be inspected for credential or cryptocurrency‑related exfiltration attempts.