ledger[.]janning[.]co[.]uk

The domain ledger.janning.co.uk has been identified as a brand impersonation phishing site targeting Ledger, a cryptocurrency hardware wallet provider. Analysis confirms the domain is designed to deceive users into believing they are interacting with legitimate Ledger services, likely to harvest sensitive credentials or financial information. As of the latest assessment, the domain has been taken offline, but prior activity indicates a persistent threat to users of cryptocurrency platforms. Technical indicators reveal the domain was registered through 123-Reg Limited on August 03, 2006, and resolves to the IP address 151.101.130.159. It is flagged by 3 of 95 security vendors on VirusTotal and appears on one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, reflecting its malicious nature. Infrastructure analysis detects the use of WordPress, MySQL, PHP, All in One SEO, and Flywheel, alongside a Let's Encrypt SSL certificate, which may lend a false sense of legitimacy to unsuspecting users. The page title, 'Ledger Accounting,' further reinforces the impersonation attempt. While the domain is currently offline, organizations and individuals should remain vigilant. Network defenders are advised to block the domain and its associated IP address (151.101.130.159) at the perimeter. Users who may have interacted with this domain should immediately revoke any credentials or session tokens associated with Ledger services and monitor for unauthorized transactions. Cryptocurrency wallet holders are urged to verify domain authenticity before entering sensitive information and to rely exclusively on official channels for account access.