ledger-support-portal[.]com
ledger-support-portal.com — Konten tidak tersedia. Peniruan identitas merek: Ledger; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 17/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, CyRadar); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 95/100. Registrar: Amazon.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain ledger-support-portal.com was registered on September 09, 2025 through Amazon Registrar, Inc. and resolves to the IPv4 address 63.177.227.145, which is hosted on an AWS EC2 instance in the eu-central-1 region (Germany). The domain is currently listed as offline, indicating that the malicious site has been taken down or is no longer serving content. Infrastructure analysis shows the domain is served by four Amazon‑managed name servers: ns-636.awsdns-15.net, ns-504.awsdns-63.com, ns-1797.awsdns-32.co.uk, and a fourth entry truncated in the source data. Threat intelligence indicates the site was used in a crypto‑related scam that impersonates Ledger, the hardware wallet brand, and is classified as a brand‑impersonation campaign.
The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy sinkhole, confirming that defensive controls have identified it as malicious. AlienVault OTX records associate the domain with two separate threat‑intel pulses, providing additional corroboration of its malicious intent. VirusTotal analysis shows that 17 of 95 scanning engines flagged the domain, demonstrating a moderate detection consensus across multiple vendors. No public Safe Browsing verdict is cited, and no SSL or HTTP status details are available beyond the offline indication.
Defenders should continue to block the domain at perimeter and DNS layers, monitor the associated IP address for any re‑use, and update internal watchlists for Ledger‑related impersonation attempts. Because the site is offline, immediate mitigation focuses on preventing future re‑deployment of the same infrastructure, especially given the low‑cost registration path via a major registrar and the use of widely available cloud hosting. Ongoing threat‑intel feeds should be queried for any resurgence of this domain or related indicators of compromise.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | ledger-support-portal.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive