ledger-eligibility[.]com
“Ledger - Prenez vos cryptos en main”
证据摘要
Analysis of ledger-eligibility.com indicates a confirmed crypto scam infrastructure impersonating Ledger, a cryptocurrency hardware wallet provider. The domain was registered on February 21, 2026, through CNOBIN INFORMATION TECHNOLOGY LIMITED and is currently offline. Infrastructure analysis reveals the site was hosted behind Cloudflare (AS13335) at IP 172.67.194.171, with nameservers maxine.ns.cloudflare.com and skip.ns.cloudflare.com, a common pattern for phishing operations leveraging CDN services to obscure hosting origins. The page title, 'Ledger - Prenez vos cryptos en main,' directly references Ledger's branding and includes French-language content, suggesting a targeted campaign against French-speaking users or regions.
Six of 93 security vendors on VirusTotal flagged this domain as malicious, and it appears on at least one security blocklist, specifically PhishDestroy. The absence of an SSL certificate further reduces trust signals, though this alone is not conclusive evidence of malice. The domain's creation date aligns with typical phishing lifecycle timelines, where domains are registered shortly before deployment and taken offline post-detection to evade takedowns. While the exact content of the site remains unanalyzed, the combination of brand impersonation, crypto scam classification, and detection by security vendors confirms its malicious intent.
Defenders should treat this domain as high-risk for crypto-related fraud. Blocking the domain and associated IP (172.67.194.171) at the network level is recommended. Monitoring for newly registered domains with similar naming patterns (e.g., 'ledger-' prefixes) or registrations through CNOBIN INFORMATION TECHNOLOGY LIMITED may help identify related campaigns. Given the domain's current offline status, further forensic analysis of its infrastructure is limited, but historical DNS and WHOIS records should be preserved for potential incident response.
已提交证据快照
- 已发送
- 台账记录
- 1
- 案件 ID
PD-20260215-ADF78D- 已捕获页面标题
- Ledger - Prenez vos cryptos en main
- PDF 文件
- PDF 证据
完整证据文本
Section 3.1 of AUP: The domain ledger-eligibility.com is engaged in phishing activities, which directly contravenes your Acceptable Use Policy prohibiting illegal activities and deception.
Section 4.2 of TOS: The use of this domain for fraudulent purposes constitutes a violation of your Terms of Service, which reserves the right to suspend or terminate services for such violations.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: This federal law prohibits unauthorized access to computers and the use of such access to commit fraud.
Wire Fraud - 18 U.S.C. § 1343: This statute criminalizes schemes to defraud individuals or entities using electronic communications, applicable to phishing activities.
CAN-SPAM Act - 15 U.S.C. § 7701: This law regulates commercial email and prohibits deceptive practices, including phishing schemes that mislead recipients.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny. Non-compliance with applicable laws could result in severe penalties.
Data Coverage
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | ledger-eligibility.com |
malicious | Sinkholed |
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
检测时间线
-
Cloudflare Radar
已存储 Cloudflare Radar 扫描 · 打开扫描
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控