ledgervalidate[.]com

PhishDestroy first observed ledgervalidate.com on Jun 13, 2026. The hostname explicitly references Ledger; stored content metadata identifies the same apparent target. Stored page analysis classifies the content as brand impersonation. Current evidence score: 83/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Spamhaus DBL. VirusTotal recorded 5 detections among 94 engines: CRDF, Gridinsoft, Sophos on Jul 12, 2026 at 15:12 UTC. Spamhaus DBL: DBL_SPAM on Jul 13, 2026 at 18:36 UTC. Non-positive and contextual checks: Gridinsoft assigned a trust score of 1/100 (Scam); no observation timestamp was retained. AlienVault OTX listed 1 community pulse reference (not vendor detections) on Apr 18, 2026 at 05:10 UTC. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Apr 18, 2026 at 05:00 UTC.

An access-restricted HTTP 403 response was recorded on Aug 8, 2026 at 10:31 UTC. Registration records for the domain list CNOBIN INFORMATION TECHNOLOGY LIMITED as the registrar and Apr 17, 2026 as the creation date. At collection time, the hostname resolved to 172.67.166.251 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. TLS metadata lists Let's Encrypt / E7 as the certificate issuer with validity through Jul 6, 2026; checked Apr 18, 2026 at 02:00 UTC.

Neither a page title nor a landing-page capture is stored. The content indicators and 2 positive source findings support the current Ledger-themed brand impersonation classification.