nledger[.]cn

Analysis of nledger.cn as of July 27, 2026 indicates that the domain is actively engaged in a crypto drainer operation and is classified as high risk. VirusTotal reports that 13 of 91 security vendors flag the domain, demonstrating a moderate level of detection across commercial scanning engines. The domain appears on one security blocklist and is currently blocked by the PhishDestroy filter, confirming that at least one external mitigation service has taken active measures against it.

An HTTP request to the domain returns a 200 status code, showing that the site is reachable and serving content, which aligns with its active status in the intelligence feed. No additional infrastructure details such as IP address, hosting provider, or registrar are present in the available data, leaving the broader attack infrastructure uncharacterized. Defenders should prioritize adding nledger.cn to inbound and outbound deny lists across firewalls, proxy servers, and endpoint protection solutions.

Network monitoring should include alerts for any connections to the domain, and security information and event management (SIEM) rules should be tuned to flag DNS queries or HTTP requests targeting it. Because the domain is already flagged by multiple vendors, updating URL and domain reputation feeds in security products will improve detection. Continuous re‑evaluation is advised, as further intelligence such as IP attribution or payload samples may emerge, potentially enabling more granular remediation actions.