Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@godaddy.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
ledger-co[.]dream[.]space
“Ledger.com/start Download - Setup Ledger Wallet”
ledger-co.dream.space — असत्यापित. ब्रांड प्रतिरूपण: Ledger; घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 12/91 (BitDefender, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker); URLQuery 3 alerts; PhishDestroy score 92/100. रजिस्ट्रार: Go Daddy.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of ledger-co.dream.space, created on 21 February 2026 and registered through Go Daddy, LLC, shows a high‑risk crypto‑related impersonation of the Ledger brand. The site is listed on one security blocklist and is actively blocked by PhishDestroy, indicating that defensive feeds have already identified it as malicious. VirusTotal reports 11 of 93 scanning engines flagging the domain, reinforcing the suspicion. The domain resolves to IP 104.18.20.20, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. Nameservers oaklyn.ns.cloudflare.com and titan.ns.cloudflare.com confirm the use of Cloudflare’s DNS infrastructure.
TLS termination is provided by Google Trust Services under the WE1 certificate, suggesting a valid‑looking HTTPS connection. An HTTP 302 redirect is observed, and the final page title reads “Ledger.com/start Download – Setup Ledger Wallet”, directly referencing the Ledger brand and aligning with the declared scam type “Crypto Scam”. Detected front‑end libraries include Three.js, ECharts, Tailwind CSS, jsDelivr, cdnjs, and HSTS, all typical of modern web stacks but not indicative of benign intent. The page is associated with the “Seed Phrase Phishing” kit, a known template used to harvest cryptocurrency seed phrases.
Gridinsoft assigns a trust score of 0 / 100, reflecting an extremely low reputation. While the visible content has not been captured, the combination of brand impersonation, malicious kit attribution, blocklist presence, and multiple vendor detections provides strong evidence that the domain is being used to lure Ledger users into disclosing private keys or installing fraudulent wallet software. Defenders should block the domain at network perimeter, add the IP address to deny‑list policies, monitor DNS queries for the associated nameservers, and update endpoint detection rules to flag any process attempting to download or execute files matching the page title.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | ledger-co.dream.space |
malicious | Sinkholed |
| Hagezi Threat Feed | ledger-co.dream.space |
malicious | Sinkholed |
| OpenDNS | ledger-co.dream.space |
phishing | Phishing Block |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: dream.space
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain dream.space behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 7 identified
Utility-first CSS framework for rapid custom UI development.
Free public CDN for open-source projects, serving files from npm and GitHub.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of ledger-co.dream.space · checked Mar 2, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260211-4DDD2B Recipient: abuse@godaddy.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।