ecomledger[.]io

This domain ecomledger.io was registered on 21 February 2026 and is currently active. Infrastructure analysis shows it resolves to the IPv4 address 192.0.78.137, which belongs to AS2635 Automattic, Inc in the United States. The domain uses the WordPress.com name server set (ns1‑ns3.wordpress.com) and hosts a WordPress site behind Nginx with MySQL, PHP, jQuery and HSTS enabled. Email routing is configured with Google Workspace MX records (priority 1 aspmx.l.google.com and priority 5 alt2.as...). The TLS certificate is issued by Let’s Encrypt (E7) and the web server returns HTTP 200. Gridinsoft assigns a trust score of 0/100 and the domain appears on one security blocklist; PhishDestroy has already blocked it. VirusTotal reports a single positive detection out of 93 scanners. The page title references “eCommerce Accounting and Tax Filling – Amazon, Shopify, WooCommerce, Walmart and eBay Accountants,” and the domain is classified as a brand‑impersonation campaign targeting Ledger. The threat is rated high. Defenders should add ecomledger.io to outbound‑web filtering rules, monitor DNS queries for the associated IP and name‑servers, and consider updating intrusion‑prevention signatures to catch the WordPress‑based payloads. Because the site is still live, continuous observation is advised to detect any credential‑stealing forms or malicious payloads that may be introduced later.