2879ledger[.]com
2879ledger.com 网络钓鱼与安全检查
“Ledger Live”
2879ledger.com — 内容不可用 (HTTP 502). 品牌冒充:Ledger; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 16/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 1 det.; URLScan malicious verdict; PhishDestroy score 95/100. 注册商: NameSilo.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
PhishDestroy first observed 2879ledger.com on Mar 29, 2026. The hostname explicitly references Ledger; stored content metadata identifies the same apparent target. The captured page title is “Ledger Live”. Evidence score: 95/100 (critical).
4 independent sources recorded positive findings: VirusTotal, DNS security resolvers, URLQuery, and URLScan. VirusTotal recorded 16 detections among 94 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, Forcepoint ThreatSeeker, Fortinet on Jun 26, 2026 at 10:04 UTC. DNS security checks returned 4 blocking results across 12 tested policies: Brand Ledger, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. URLQuery recorded 1 detection on Mar 29, 2026 at 15:29 UTC. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Ledger and assigned phishing as its category on Jul 29, 2026 at 03:10 UTC.
HTTP 502 was recorded on Aug 9, 2026 at 01:08 UTC; content was unavailable. Registration records for the domain list NameSilo, LLC as the registrar and Mar 29, 2026 as the creation date. At collection time, the hostname resolved to 192.109.200.111 on AS51396 (Pfcloud UG). The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.
数据覆盖范围12 recorded checks
网络安全情报 Registrar context
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
取证情报
所用技术 · 4 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comVirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of 2879ledger.com · checked Jun 26, 2026
证据与外部报告Independent lookups and source reports
PD-20260329-95A786 Recipient: abuse@namesilo.com Victim safety and official reportingImmediate actions and verified reporting channels
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。