ledger[.]relevee[.]nl

The domain ledger.relevee.nl is currently flagged for brand impersonation and is active as of July 12, 2026. This domain impersonates the cryptocurrency brand Ledger and is known to resolve to the IP address 52.151.225.58, which is located in the United States and is part of the AS8075 Microsoft Corporation network. The domain was created on December 11, 2024, suggesting a relatively long-standing presence. Despite the domain's active status, it returns an HTTP 403 Forbidden response, which might indicate that the site is currently under maintenance or has been partially mitigated. However, the presence of an HSTS (HTTP Strict Transport Security) header suggests that the domain has been configured to enforce secure connections, potentially to enhance the credibility of the phishing site. The domain appears on one security blocklist, specifically PhishDestroy, which is a clear indicator of its malicious nature. While VirusTotal has not flagged the domain as of yet, with 0 out of 95 detections, this does not provide a definitive measure of safety, as the threat landscape is constantly evolving and the domain may still be in the early stages of detection. It is registered through GoDaddy.com, LLC, a common registrar for both legitimate and malicious domains. Defenders should consider the domain's active status and its presence on a security blocklist as strong indicators of potential phishing. It is recommended to block this domain and monitor for any related activities or infrastructure to prevent unauthorized access to user credentials and cryptocurrency assets.