ledncryptocompany[.]org

The domain ledncryptocompany.org was registered on February 21, 2026 through Dynadot LLC and is currently listed as offline. The authoritative nameservers ns23.asurahosting.com and ns24.asurahosting.com resolve the domain to the IP address 198.251.89.30, which belongs to AS53667 FranTech Solutions located in the United States. An SSL certificate issued by Let’s Encrypt (R12) is present, indicating that the site was served over HTTPS at the time it was active. The page title observed during the brief live period reads “LEDN Crypto Company Inc. | CFD Trading — Trading on Stocks, Gold, Oil, Indices”, which combines the brand name Crypto.com with references to contract‑for‑difference (CFD) trading, a common lure in cryptocurrency‑related scams.

The domain is explicitly flagged as a Crypto.com brand impersonation in the provided intelligence. Infrastructure indicators show that the domain appears on three external security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans reported two of ninety‑three security vendors flagging the domain, reinforcing the malicious classification. The Gridinsoft trust score is 0 out of 100, and the domain’s MX record points to ledncryptocompany.org itself, a pattern often used by phishing operators to control email flow.

No additional content analysis is available beyond the page title, and the exact malicious payload or credential‑harvesting mechanisms have not been disclosed. Defenders should add the domain and its associated IP address to deny‑list rules, monitor DNS queries for the listed nameservers, and enforce blocklist updates that include the three known listings. Since the site is already offline, ongoing vigilance is recommended for any resurgence of the same infrastructure, especially any new domains using the same registrar, nameserver set, or SSL certificate issuer. Continuous observation of threat‑intel feeds for fresh indicators tied to Crypto.