ledger-com[.]cc

Analysis conducted on August 02, 2026 classifies ledger-com.cc as an active crypto drainer infrastructure with an elevated risk rating. The domain resolves to the IPv4 address 188.114.97.3 and is currently listed on three independent security blocklists. Detection platforms have taken notice: PhishDestroy, MetaMask, and SEAL have each issued blocks against the domain, indicating that the site is being used to target cryptocurrency wallets or related assets.

VirusTotal reports that four out of ninety‑one scanned security vendors have flagged ledger-com.cc as malicious, reinforcing the suspicion that the domain participates in illicit financial activity. The limited public data does not reveal the underlying hosting provider, SSL certificate details, or the exact page title, leaving the precise payload delivery mechanism undocumented. Nonetheless, the convergence of multiple blocklists, targeted blocking by wallet‑related security products, and the presence of malicious detections on VirusTotal provide a consistent picture of a malicious actor attempting to harvest private keys or redirect transaction approvals.

Defenders should prioritize adding 188.114.97.3 to network deny lists, enforce DNS filtering for ledger-com.cc, and monitor outbound connections for any attempts to resolve or contact the domain. Endpoint security solutions should be configured to alert on any process that initiates communication with the domain or attempts to load scripts from it. Continuous threat‑intel feeds should be consulted for updates, as further analysis may reveal additional indicators such as certificate fingerprints or specific phishing kits used in future campaigns.