synchlegder-live[.]help
“IMPORT YOUR WALLET”
Ringkasan bukti
Analysis of the domain synchlegder-live.help indicates it was actively used for wallet seed phishing targeting Ledger users. The domain was registered on February 21, 2026, through Dynadot LLC and resolved to the IP address 192.185.33.172, hosted on AS19871 (Network Solutions, LLC) in the United States. Its nameservers—hgns1.hostgator.com, hgns2.hostgator.com, ns8061.hostgator.com, and ns8062.hostgator.com—suggest shared hosting infrastructure commonly exploited for phishing campaigns. The page title, 'IMPORT YOUR WALLET,' aligns with known tactics used to deceive users into submitting cryptocurrency wallet recovery phrases. The domain appears on one security blocklist and is referenced in two AlienVault OTX threat intelligence pulses, confirming its classification as malicious by multiple sources.
Twelve of 93 security vendors on VirusTotal flagged the domain, reinforcing its association with fraudulent activity. No SSL certificate was detected, a common red flag for phishing sites. The domain has since been taken offline, though its prior hosting and detection history remain relevant for historical threat analysis. Defenders should treat this domain as part of a broader wallet phishing campaign.
While the site is no longer active, its infrastructure—including the IP and nameservers—may be reused in future attacks. Organizations monitoring for Ledger-related threats should include this domain in retrospective scans and blocklists. The absence of an SSL certificate and the use of HostGator nameservers further support its classification as high-risk infrastructure. No evidence suggests this was part of a larger phishing kit or affiliate network, but the scam type (wallet/seed phishing) is consistent with prior Ledger impersonation schemes.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260107-88FEBE- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: Acceptable Use forbids illegal content; Spam & Abuse Policy prohibits phishing, fraud, malware; Dynadot may disable DNS and suspend domains
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | synchlegder-live.help |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive