Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@hello.co.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
ledger-bitcoin-recovery-wallet[.]com
“Ledger Bitcoin Recovery | Shared Wallet Setup”
ledger-bitcoin-recovery-wallet.com — 확인되지 않음. 브랜드 사칭: Bitcoin; 사기 유형: Brand Impersonation. 증거 요약: VirusTotal 16/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 1 alert; URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 95/100. 등록기관: Hello Internet.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
ledger-bitcoin-recovery-wallet.com is an active brand-impersonation site targeting Bitcoin users. The domain was registered on March 29 2026 through Hello Internet Corp and resolves to the Cloudflare edge address 104.21.62.139. DNS is served by finley.ns.cloudflare.com and rachel.ns.cloudflare.com, indicating the use of Cloudflare's DNS service. The site presents the page title "Ledger Bitcoin Recovery | Shared Wallet Setup", suggesting an attempt to lure victims into a fraudulent Ledger wallet recovery flow. The SSL certificate is issued by Let’s Encrypt (E7), providing HTTPS with HTTP/3 support and Cloudflare Browser Insights enabled. Security telemetry shows the domain is listed on one blocklist, currently blocked by PhishDestroy. VirusTotal analysis reports three of ninety-four scanners flagging the domain, and Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. The risk level is high and the infrastructure remains active as of the report date. Open questions include the specific phishing kit or credential-harvesting mechanism employed, as no page content has been examined. Defenders should block the domain at network perimeters, monitor DNS queries for the associated Cloudflare nameservers, and enforce URL filtering based on the observed indicator set. Ongoing observation of the IP 104.21.62.139 and related Cloudflare edge nodes is recommended to detect any shift in hosting or payload delivery.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | ledger-bitcoin-recovery-wallet.com |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
사용 기술 · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 분석
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of ledger-bitcoin-recovery-wallet.com · checked Mar 29, 2026
사이트 구성 분석
증거 및 외부 보고서
PD-20260329-4DFBAC Recipient: abuse@hello.co 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.