web3t-ledger[.]com

PhishDestroy first observed web3t-ledger.com on Mar 28, 2026. The hostname explicitly references Ledger; stored content metadata identifies the same apparent target. The captured page title is “Web3 - Enterprise Web3 Solutions”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 56/100 (high).

Positive findings are stored from 2 sources: VirusTotal and DNS security resolvers. VirusTotal recorded 2 detections among 94 engines: alphaMountain.ai, Kaspersky on Jul 14, 2026 at 19:40 UTC. DNS security checks returned 1 blocking result across 11 tested policies: Brand Ledger; no observation timestamp was retained. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 8, 2026 at 02:20 UTC. URLQuery recorded no positive detection on Mar 28, 2026 at 06:28 UTC. Google Safe Browsing returned no flag on Mar 28, 2026 at 08:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:10 UTC. PhishStats returned no feed match on Mar 28, 2026 at 08:15 UTC.

HTTP 502 server error was recorded on Aug 7, 2026 at 22:15 UTC. Registration records for the domain list TuringSign Inc. d/b/a Cosmotown as the registrar and Mar 28, 2026 as the creation date. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 185.244.36.172 on AS62068 (SpectraIP B.V.). The recorded endpoint location is Amsterdam, NL. The stored server header is LiteSpeed/6.3.4 Enterprise. DOM analysis on Jul 29, 2026 at 04:02 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Jun 23, 2026; checked Mar 29, 2026 at 06:27 UTC.

The content indicators and 2 positive source findings support the current Ledger-themed brand impersonation classification.