update-ledger[.]gl
Category: Suspicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of update-ledger[.]gl
The domain update-ledger[.]gl appears to be a newly registered website using a name that closely resembles the Ledger brand, which is widely associated with cryptocurrency hardware wallets and related account-management services. Based on the domain wording and the available classification data, the site may be intended to present itself as an update, support, or account-related portal connected to Ledger users.
The scan data does not indicate a substantial standalone business presence or established web reputation. The domain is not ranked in major popularity lists, was registered very recently, and appears to rely on basic hosting and DNS infrastructure. These characteristics do not by themselves prove abuse, but they are commonly seen on short-lived campaign sites, including credential-harvesting or impersonation pages.
Safety Assessment for update-ledger[.]gl
Several indicators suggest elevated risk at the time of this scan. The domain was flagged by 7 out of 91 security engines, and multiple web-classification sources associated it with phishing, fraud, or suspicious activity. In addition, the domain closely resembles ledger.com in plain language and may be a look-alike intended to benefit from user confusion, especially given the inclusion of the word "update" alongside a well-known cryptocurrency brand name.
Other contextual signals strengthen that concern. The domain age is only 7 days, it has no established popularity ranking, no MX records were noted, and SSL/TLS appears invalid or missing. While the malware file scan did not detect malicious files at the time of this scan, phishing pages often contain little or no traditional malware and may instead focus on collecting login details, wallet recovery phrases, or other sensitive information.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
From a technical standpoint, the site appears to be hosted on an nginx web server at IP address 185.105.33.106 with hosting attributed to Hosterion SRL in the United Kingdom. The domain uses nameservers from a third-party DNS provider, and DNSSEC is unsigned, which means DNS responses do not appear to benefit from DNSSEC validation.
A notable concern is that SSL/TLS was reported as invalid or missing at the time of the scan, with no confirmed protocol or certificate expiry information available. For any site that may request credentials, wallet information, or other sensitive data, absent or misconfigured HTTPS would be a significant warning sign. The domain's very recent registration further increases uncertainty around its legitimacy and long-term reliability.
Share your experience with this website. Was it safe? Did you encounter any issues?