legder-lives-downloads[.]com
“Ledger Wallet: The Main Guide to Acquisition & Management”
legder-lives-downloads.com — 콘텐츠를 사용할 수 없음. 브랜드 사칭: Ledger; 사기 유형: Brand Impersonation. 증거 요약: VirusTotal 9/91 (alphaMountain.ai, CRDF, CyRadar, Ermes, Forcepoint ThreatSeeker); URLQuery 1 alert; PhishDestroy score 81/100. 등록기관: MAT BAO.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis of legder-lives-downloads.com, created on 15 June 2026 and registered through MAT BAO CORPORATION, indicates a brand‑impersonation campaign targeting Ledger. The domain resolves to the Cloudflare edge address 188.114.96.3, which is associated with AS13335 and located in the United States. DNS resolvers return the Cloudflare authoritative nameservers bjorn.ns.cloudflare.com and ulla.ns.cloudflare.com, confirming the use of Cloudflare’s CDN and DDoS‑mitigation services. The site presented a TLS certificate issued by Google Trust Services under the WE1 intermediate, showing a valid HTTPS connection despite the malicious purpose.
The only visible artifact is the page title “Ledger Wallet: The Main Guide to Acquisition & Management”, which directly references the Ledger brand and reinforces the impersonation intent. VirusTotal scans have flagged the domain in 9 of 91 security engines, and the domain is listed on a single external blocklist. PhishDestroy has recorded the domain as blocked, and it is currently taken offline, which may be the result of takedown actions or temporary hosting changes. Evidence confirms the domain’s classification as a brand‑impersonation scam; however, the exact content served to victims, the presence of credential‑stealing forms, or any additional payloads have not been disclosed.
No further information on malicious scripts, redirect chains, or command‑and‑control infrastructure is available. Defenders should add legder-lives-downloads.com to URL filtering and domain‑blocking policies, especially for environments handling Ledger‑related credentials or cryptocurrency wallets. Monitoring of Cloudflare edge IP 188.114.96.3 for new activity, and periodic re‑evaluation of blocklist status, is advised. Organizations should also educate users about unexpected Ledger‑related guides and advise verification of official Ledger URLs before entering any sensitive data.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | legder-lives-downloads.com |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 분석
증거 및 외부 보고서
PD-20260624-4DB0E8 Recipient: abuse@matbao.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.