Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
horus-ledger[.]fr
“Site en construction”
Zusammenfassung der Beweislage
Analysis of the domain horus-ledger.fr shows it was registered on 21 February 2026 through OVH and resolves to the IPv4 address 5.135.23.164 located in France, ASN 16276 (OVH SAS). The site presents the HTML title “Site en construction” and serves a valid Let’s Encrypt certificate (E8). HTTP response code is 200. The domain is listed on three security blocklists, including PhishDestroy, MetaMask and SEAL, and appears on three additional blocklists. Gridinsoft assigns a trust score of 0/100, and four of ninety‑three VirusTotal scanners have flagged the host. The campaign targets Ledger brand users by masquerading as a Ledger‑related service and is classified as a cryptocurrency‑related brand‑impersonation. Infrastructure indicates a typical OVH‑hosted setup; no further hosting details are available. Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms because the page content has not been publicly analysed. Defenders should block the domain at DNS and proxy layers, monitor outbound connections to the IP address, and add the host to internal blacklists. Incident response teams should treat any credentials submitted to the site as compromised and advise affected users to reset Ledger authentication material. Ongoing surveillance of related OVH‑registered domains is recommended.
Momentaufnahme der übermittelten Beweise
- Gesendet
- Protokolleinträge
- 1
- Fall-ID
PD-20260131-F9BE35- PDF-Artefakt
- PDF-Beweis
Rechtsgrundlage
Vollständiger Beweistext
Section 3.1 of the Acceptable Use Policy: The domain horus-ledger.fr is actively engaged in phishing activities, which is a direct violation of your policy prohibiting illegal activities and fraud.
Section 4.2 of the Terms of Service: The registrar reserves the right to suspend or terminate services for violations, which applies in this case due to the fraudulent nature of the domain's operations.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: Prohibits unauthorized access to computers and the use of such access to commit fraud.
Wire Fraud Statute - 18 U.S.C. § 1343: Criminalizes schemes to defraud individuals or entities via electronic communications.
CAN-SPAM Act - 15 U.S.C. § 7701: Regulates commercial email and prohibits deceptive practices, including phishing.
Regulatory Note: Failure to act on this report may expose your organization to legal liability and regulatory scrutiny. Immediate action is recommended to mitigate risks associated with hosting this fraudulent domain.
Data Coverage
Erkenntnisse zur Netzwerksicherheit
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Blocklistenabdeckung
10 überwachte externe Feeds · gespeicherter Stand 13.08.2026
Erkennungszeitleiste
-
VirusTotal
4 → 7
-
Domainstatus
Erreichbar → Nicht erreichbar
-
Domainstatus
Nicht erreichbar → Erreichbar
VirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of horus-ledger.fr · checked Mar 2, 2026
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt