Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@v-sys.org.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
restore-iedgeriive[.]su
“Welcome”
restore-iedgeriive.su — Não verificado. Representação da marca: Ledger; Tipo de golpe: Brand Impersonation. Resumo das evidências: VirusTotal 2/92 (Gridinsoft, Kaspersky); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrador: RUCENTER-SU.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
PhishDestroy identifies the domain restore-iedgeriive.su as a live phishing page impersonating the official Ledger wallet recovery portal. The site is currently active and masquerades as a legitimate service to trick users into surrendering their recovery phrases or private keys. This campaign targets cryptocurrency holders who may be seeking to restore access to their wallets, making it a high-risk threat to personal digital assets and financial security.
This domain was flagged by 2 of 95 VirusTotal vendors and already appears on 2 public blocklists. It was registered on May 05, 2026 through RUCENTER-SU, resolving to IP address 213.111.149.25. The site uses a Let’s Encrypt SSL certificate to appear trustworthy, yet it is blocked by MetaMask and SEAL security systems, indicating early-stage detection by reputable security vendors.
Given the active status and evasive characteristics of restore-iedgeriive.su, PhishDestroy recommends users avoid interacting with this domain and immediately report it to their browser or wallet security extensions. Cryptocurrency users should verify URLs through official Ledger channels before entering any sensitive information. Organizations are advised to add this domain to internal blocklists and monitor for related campaigns. Seed: 276cd5
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 3 identified
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.
www.ubuntu.com 100% de confiançaApache is a free and open-source cross-platform web server software.
httpd.apache.org 100% de confiançareCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
www.google.com 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of restore-iedgeriive.su · checked May 8, 2026
Evidências e relatórios externos
PD-20260508-15639D Recipient: abuse@v-sys.org Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo