bluledger[.]com

This domain, bluledger.com, is flagged as a brand impersonation phishing threat with an elevated risk level, specifically targeting the Ledger brand. No drainer kit was identified in the available intelligence, but the page title—'Home | Mobile Banking, Credit Cards, Mortgages, Auto Loan'—suggests an attempt to mimic a financial services interface to harvest sensitive user data. The domain was registered on May 09, 2025, through Dynadot LLC, and its infrastructure includes Typekit, Smartsupp, Modernizr, jQuery, Cloudflare Browser Insights, and HTTP/3, indicating a sophisticated setup designed to evade basic detection.

Technical indicators confirm the malicious nature of this domain. VirusTotal reports a detection rate of 1 out of 95 security vendors, while AlienVault OTX lists the domain in one threat intelligence pulse. The domain resolves to IP address 188.114.96.3 and appears on one security blocklist. The Gridinsoft trust score is 0/100, and the Scamadviser trust score is 1/100, both indicating high risk. Google Safe Browsing status was not provided, but the domain is blocked by PhishDestroy, further supporting its classification as a phishing threat.

As of the latest analysis, bluledger.com is offline, likely due to takedown actions or registrar suspension. The remaining risk is moderate, as the domain could be reactivated or redirected to new infrastructure, and users who visited the site before takedown may have already exposed credentials or personal information. Users should monitor accounts for unauthorized activity and avoid interacting with any communications referencing this domain. Security teams are advised to block the IP 188.114.96.3 and monitor for similar domain registrations through Dynadot LLC.