bonusledger[.]net

This domain, www.bonusledger.net, is assessed as an elevated-risk crypto scam impersonating Ledger, a hardware wallet provider. Analysis indicates the domain was registered on March 22, 2026, through GoDaddy.com, LLC, and was taken offline by July 23, 2026. Infrastructure analysis reveals the site resolved to IP 216.198.79.1, hosted under Lefkoff Industries in the US, with nameservers ns1.vercel-dns.com and ns2.vercel-dns.com, suggesting deployment on Vercel. The site returned an HTTP 200 status and employed HSTS alongside a Let's Encrypt SSL certificate, which may have been intended to lend legitimacy to the operation.

The page title, 'BonusLedger - Bank Bonus Tracker for iPhone, iPad,' does not align with the known scam type (crypto scam) or the impersonated brand (Ledger), indicating potential misdirection or a generic cover for malicious activity. Detection data shows the domain was flagged by 2 of 94 security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. While the domain is currently offline, its prior active status and technical indicators warrant continued monitoring. Defenders should note that the combination of Vercel hosting, HSTS implementation, and a valid SSL certificate may have been used to evade basic detection mechanisms.

The discrepancy between the page title and the scam type suggests the site's content or purpose may have evolved or been obfuscated. Given the domain's registration age and its presence on a blocklist, it is advisable to treat any prior or future resolutions of this domain as malicious. No further details about the specific phishing kit or user interaction flow are available at this time.