ch-coinledger[.]com

The domain ch-coinledger.com has been identified as a brand impersonation phishing site specifically targeting Ledger, a popular cryptocurrency hardware wallet brand. Currently offline, this domain was created on May 18, 2026, and was actively used to deceive users seeking secure access to their Ledger accounts. The site's page title, "Securing access," was designed to appear legitimate and lull visitors into a false sense of security.

PhishDestroy's analysis reveals that ch-coinledger.com is flagged by 5 of 95 VirusTotal security vendors, indicating a consensus among cybersecurity tools that it is malicious. The domain was registered through CNOBIN INFORMATION TECHNOLOGY LIMITED and resolves to IP address 193.169.194.12. It appears on three security blocklists and uses an SSL certificate issued by Let's Encrypt (R12), which unfortunately lends a false veneer of trustworthiness. The TrustedSec score is notably low, reflecting the high risk associated with this domain.

Given that the domain is now offline, the immediate threat is mitigated, but users who may have previously visited the site should take precautions. PhishDestroy recommends that anyone who entered credentials or private keys on ch-coinledger.com should immediately change their passwords and enable two-factor authentication on all cryptocurrency accounts. Additionally, monitoring financial accounts for unauthorized activity is advised. For ongoing protection, always verify domain authenticity before entering sensitive information, especially when dealing with cryptocurrency services.