ldnbit[.]net

The domain ldnbit.net is identified as a cryptocurrency phishing site targeting users through deceptive login and transaction interfaces. Analysis confirms its status as offline, though it remains a documented threat in security databases. The domain was designed to impersonate cryptocurrency exchange or wallet services, likely to harvest credentials, private keys, or facilitate unauthorized fund transfers. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Dominet (HK) Limited. It resolves to the IP address 188.114.96.3 and has been flagged by 12 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and holds a trust score of 1 out of 100, indicating high-risk classification. The page title, LdnBit, aligns with common naming conventions used by cryptocurrency platforms, further suggesting an intent to deceive users familiar with such services. As of the latest verification, ldnbit.net is offline, reducing immediate exposure risk. However, historical data and detection metrics confirm its malicious nature. Organizations and individuals are advised to block the domain and associated IP at the network level. Users who interacted with the site should assume credential compromise, revoke active sessions, and monitor accounts for unauthorized transactions. Security teams should update detection rules to include this domain in phishing filters and conduct retrospective log analysis for prior access attempts.