Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
burnledger[.]space
“Burn Ledger”
This domain, burnledger.space, is flagged as a high-risk brand impersonation targeting Ledger cryptocurrency users. The domain was registered on March 16, 2026, through Key-Systems LLC, and its infrastructure is hosted in the United States on AS701 Verizon Business, resolving to IP address 138.88.4.74. The page title, 'Burn Ledger,' directly mimics the legitimate Ledger brand, indicating a phishing or scam operation aimed at stealing cryptocurrency credentials or assets. The domain uses a Let's Encrypt SSL certificate (E8), which provides HTTPS but does not authenticate the site's legitimacy, and is served via Caddy with HSTS and HTTP/3 support. VirusTotal analysis shows 7 out of 95 security vendors flagging this domain as malicious, and it appears on one security blocklist (PhishDestroy). The Gridinsoft trust score is 0 out of 100, confirming widespread distrust. The nameservers (ns.second-ns.com, ns1.your-server.de, ns3.second-ns.de) suggest a multi-jurisdictional hosting setup, possibly to evade takedown efforts. The domain is currently active and returning HTTP status 200, meaning the phishing page is live and accessible to potential victims. Defenders should block this domain and IP address at the network level, add it to threat intelligence feeds, and warn users about the impersonation. Uncertainties include the exact phishing mechanism (e.g., credential harvesting via fake login forms or malware distribution) and the full scope of the operation, as no phishing kit or email campaign data is available in the known intelligence. Analysts should monitor for related domains, subdomains, or IP changes, and report to hosting providers for takedown. Users who may have interacted with this site should rotate their Ledger credentials and enable two-factor authentication immediately.
Enregistrement du signalement transmis
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260317-059E7E- Titre de la page capturée
- Burn Ledger
- Artefact PDF
- Preuve PDF
Fondement juridique
Texte intégral des preuves
Acceptable Use Policy (AUP): The domain burnledger.space is being used for phishing activities, which constitutes a clear violation of your AUP that prohibits illegal activities, fraud, and deception.
Terms of Service (TOS): The ongoing use of this domain for malicious purposes directly contravenes your TOS, which reserves the right to suspend or terminate services for violations of these terms.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which encompasses phishing schemes that deceive users to gain sensitive information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, including phishing attacks.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits deceptive practices, which are inherent in phishing activities.
Regulatory Note: Failure to take immediate action against burnledger.space may expose your organization to liability under applicable laws and regulations. Non-compliance could result in legal repercussions and damage to your reputation.
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | burnledger.space |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources · synchronisé le 09/08/2026
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of burnledger.space · checked Mar 17, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif