Ledger
Registered lookalikes
Spellings of Ledger's official domains (ledger.com, microsoft.com, ledgerwallet.com) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
66 of the 356 are listed by a source or resolve to a listed address, checked hourly.
- ledgerwallet.si US · AS14618 · Amazon.com, Inc.Lookalike of ledgerwallet.com · the ending .siListed by MetaMaskAmazon Web Services
DetailsHide details for ledgerwallet.si
- Domain
- ledgerwallet.si
- Spelling
- The name of ledgerwallet.com with the ending .si
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-29 · Atom.com Domains LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledgerwallet.si · in the feed since 2026-11-01 11:44 UTC
- Addresses
- 52.22.175.219 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (52.22.175.219): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.tattooLookalike of ledger.com · the ending .tattooListed by MetaMaskNo address or mail server yet
DetailsHide details for ledger.tattoo
- Domain
- ledger.tattoo
- Spelling
- The name of ledger.com with the ending .tattoo
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-28 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.tattoo · in the feed since 2026-11-01 17:45 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.cv DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of ledger.com · the ending .com.cvListed by MetaMaskParking page · ParkingCrew (Team Internet)
DetailsHide details for ledger.com.cv
- Domain
- ledger.com.cv
- Spelling
- The name of ledger.com with the ending .com.cv
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-16 · Eurodns
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.cv · in the feed since 2026-10-28 05:36 UTC
- Addresses
- 185.53.179.145 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.145): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- recover-ledger.live SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of ledger.com · the name with the word “recover”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for recover-ledger.live
- Domain
- recover-ledger.live
- Spelling
- The name of ledger.com with the word “recover”
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-10-12 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (recover-ledger.live resolved to it 2026-11-05 00:29 UTC), 172.232.24.235 (recover-ledger.live resolved to it 2026-11-05 00:29 UTC), 172.234.25.42 (recover-ledger.live resolved to it 2026-11-05 00:29 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- auth-ledger.cyou US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · the name with the word “auth”Listed by MetaMaskAmazon Web Services
DetailsHide details for auth-ledger.cyou
- Domain
- auth-ledger.cyou
- Spelling
- The name of ledger.com with the word “auth”
- First found
- 2026-11-01 · the day we first found it in the .cyou zone file, already registered
- Registered
- 2026-10-11 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · auth-ledger.cyou · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 34.216.117.25 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)54.149.79.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (34.216.117.25, 54.149.79.189): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.voto US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · the ending .votoListed by MetaMaskAmazon Web Services
DetailsHide details for ledger.voto
- Domain
- ledger.voto
- Spelling
- The name of ledger.com with the ending .voto
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-07 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.voto · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 64.29.17.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (64.29.17.1, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- secureledgerwallet.xyz US · AS53667 · FranTech SolutionsLookalike of ledger.com · the name with an added wordAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for secureledgerwallet.xyz
- Domain
- secureledgerwallet.xyz
- Spelling
- The name of ledger.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-10-04 · Atak Domain Bilgi Teknolojileri A.Ş.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 198.251.83.50 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secureledgerwallet.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 198.251.83.50 · United States · AS53667 PONYNET - FranTech Solutions
- MX
- mail.secureledgerwallet.xyz
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.cafe DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…13 addressesLookalike of ledger.com · the ending .cafe4 addresses on DomainSpoof’s phishing-host listAmazon Web Services +1
DetailsHide details for ledger.cafe
- Domain
- ledger.cafe
- Spelling
- The name of ledger.com with the ending .cafe
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-17 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 4 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (ledger.cafe resolved to it 2026-11-05 05:05 UTC), 5.161.230.87 (ledger.cafe resolved to it 2026-11-05 05:05 UTC), 5.161.47.86 (ledger.cafe resolved to it 2026-11-05 05:05 UTC), 5.78.156.59 (ledger.cafe resolved to it 2026-11-05 05:05 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8800:b98b:960a:a78f:de402a05:d014:179b:c400:6beb:a719:b479:c6082a05:d014:179b:c400:7aab:4bd9:38be:d2432a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:bfb2:f57d:1efe:13d92a05:d018:1d22:800:6673:f7c3:558e:5d732a05:d018:1d22:801:a216:a799:8c87:df21
- Amazon Web Services +1
- Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers. Hetzner (195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallet.dev US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledgerwallet.com · the ending .devListed by MetaMaskCloudflareMX present
DetailsHide details for ledgerwallet.dev
- Domain
- ledgerwallet.dev
- Spelling
- The name of ledgerwallet.com with the ending .dev
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-14 · GNAME.COM PTE. LTD.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledgerwallet.dev · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.5.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.154.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:5652606:4700:3037::ac43:9a75
- Cloudflare
- Cloudflare (104.21.5.101, 172.67.154.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mxa.mailgun.orgmxb.mailgun.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- billing-ledger.info SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of ledger.com · the name with the word “billing”3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for billing-ledger.info
- Domain
- billing-ledger.info
- Spelling
- The name of ledger.com with the word “billing”
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-08-07 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (billing-ledger.info resolved to it 2026-11-05 00:29 UTC), 172.232.24.235 (billing-ledger.info resolved to it 2026-11-05 00:29 UTC), 172.234.25.42 (billing-ledger.info resolved to it 2026-11-05 00:29 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.studio US · AS3561 · CenturyLink Communications,…Lookalike of ledger.com · the ending .studioAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for ledger.studio
- Domain
- ledger.studio
- Spelling
- The name of ledger.com with the ending .studio
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-07 · Global Domains International, Inc. DBA DomainCostClub.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 64.70.19.34 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.studio resolved to it 2026-11-05 05:05 UTC
- Addresses
- 64.70.19.34 · United States · AS3561 CENTURYLINK-LEGACY-SAVVIS - CenturyLink Communications, LLC
- MX
- relay.ws.ws
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.mortgage DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…13 addressesLookalike of ledger.com · the ending .mortgage4 addresses on DomainSpoof’s phishing-host listAmazon Web Services +1
DetailsHide details for ledger.mortgage
- Domain
- ledger.mortgage
- Spelling
- The name of ledger.com with the ending .mortgage
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-04 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 4 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (ledger.mortgage resolved to it 2026-11-05 05:05 UTC), 5.161.230.87 (ledger.mortgage resolved to it 2026-11-05 05:05 UTC), 5.161.47.86 (ledger.mortgage resolved to it 2026-11-05 05:05 UTC), 5.78.156.59 (ledger.mortgage resolved to it 2026-11-05 05:05 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8800:b98b:960a:a78f:de402a05:d014:179b:c400:6beb:a719:b479:c6082a05:d014:179b:c400:7aab:4bd9:38be:d2432a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:bfb2:f57d:1efe:13d92a05:d018:1d22:800:6673:f7c3:558e:5d732a05:d018:1d22:801:a216:a799:8c87:df21
- Amazon Web Services +1
- Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers. Hetzner (195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.gy US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the ending .com.gyListed by MetaMaskCloudflare
DetailsHide details for ledger.com.gy
- Domain
- ledger.com.gy
- Spelling
- The name of ledger.com with the ending .com.gy
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-07-30 · Key-Systems GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.gy · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.77.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:4d8e2606:4700:3033::ac43:d0eb
- Cloudflare
- Cloudflare (104.21.77.142, 172.67.208.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallets.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · an added characterListed by MetaMaskReported by PhishDestroyParking page · Afternic
DetailsHide details for ledgerwallets.xyz
- Domain
- ledgerwallets.xyz
- Spelling
- Spelled like ledger.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-12 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledgerwallets.xyz · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledgerwallets.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ledgerwallets.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.co.id US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the ending .co.idListed by MetaMaskCloudflareMX present
DetailsHide details for ledger.co.id
- Domain
- ledger.co.id
- Spelling
- The name of ledger.com with the ending .co.id
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-07-10 · PT Web Commerce Communications
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.co.id · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.33.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.146.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:92c92606:4700:3036::6815:219d
- Cloudflare
- Cloudflare (104.21.33.157, 172.67.146.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.band DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…13 addressesLookalike of ledger.com · the ending .band4 addresses on DomainSpoof’s phishing-host listAmazon Web Services +1
DetailsHide details for ledger.band
- Domain
- ledger.band
- Spelling
- The name of ledger.com with the ending .band
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-06-30 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 4 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (ledger.band resolved to it 2026-11-05 05:05 UTC), 5.161.230.87 (ledger.band resolved to it 2026-11-05 05:05 UTC), 5.161.47.86 (ledger.band resolved to it 2026-11-05 05:05 UTC), 5.78.156.59 (ledger.band resolved to it 2026-11-05 05:05 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8800:b98b:960a:a78f:de402a05:d014:179b:c400:6beb:a719:b479:c6082a05:d014:179b:c400:7aab:4bd9:38be:d2432a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:bfb2:f57d:1efe:13d92a05:d018:1d22:800:6673:f7c3:558e:5d732a05:d018:1d22:801:a216:a799:8c87:df21
- Amazon Web Services +1
- Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers. Hetzner (195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-auth-center.appLookalike of ledger.com · the name with the word “auth-center”Listed by MetaMaskNo address or mail server yet
DetailsHide details for ledger-auth-center.app
- Domain
- ledger-auth-center.app
- Spelling
- The name of ledger.com with the word “auth-center”
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-06-25 · Sav.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger-auth-center.app · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.hn US · AS36352 · HostPapaLookalike of ledger.com · the ending .com.hnAddress on DomainSpoof’s phishing-host listColoCrossing
DetailsHide details for ledger.com.hn
- Domain
- ledger.com.hn
- Spelling
- The name of ledger.com with the ending .com.hn
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-06-07 · Key-Systems GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 192.255.201.150 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.com.hn resolved to it 2026-11-05 05:05 UTC
- Addresses
- 192.255.201.150 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
- ColoCrossing
- ColoCrossing (192.255.201.150): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.ms US · AS36352 · HostPapaLookalike of ledger.com · the ending .com.msListed by MetaMaskAddress on DomainSpoof’s phishing-host listColoCrossing
DetailsHide details for ledger.com.ms
- Domain
- ledger.com.ms
- Spelling
- The name of ledger.com with the ending .com.ms
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-06-07 · Key-Systems
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.ms · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 198.23.136.7 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.com.ms resolved to it 2026-11-05 05:05 UTC
- Addresses
- 198.23.136.7 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
- ColoCrossing
- ColoCrossing (198.23.136.7): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallets.live DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of ledger.com · an added characterListed by MetaMaskReported by PhishDestroyParking page · ParkingCrew (Team Internet)
DetailsHide details for ledgerwallets.live
- Domain
- ledgerwallets.live
- Spelling
- Spelled like ledger.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-05-29 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledgerwallets.live · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledgerwallets.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.ytLookalike of ledger.com · the ending .ytListed by MetaMaskMX present
DetailsHide details for ledger.yt
- Domain
- ledger.yt
- Spelling
- The name of ledger.com with the ending .yt
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-05-26 · Hosting Concepts B.V. d/b/a Openprovider
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.yt · in the feed since 2026-10-27 05:34 UTC
- MX
- route2.mx.cloudflare.netroute3.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.ag US · AS15329 · DenoLookalike of ledger.com · the ending .com.agListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for ledger.com.ag
- Domain
- ledger.com.ag
- Spelling
- The name of ledger.com with the ending .com.ag
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-03-18 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.ag · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger.com.ag · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 69.67.170.170 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.com.ag resolved to it 2026-11-05 05:05 UTC
- Addresses
- 69.67.170.170 · United States · AS15329 DENO - Deno
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.ec US · AS36352 · HostPapaLookalike of ledger.com · the ending .com.ecListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host listColoCrossing
DetailsHide details for ledger.com.ec
- Domain
- ledger.com.ec
- Spelling
- The name of ledger.com with the ending .com.ec
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-03-03 · Key-Systems GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.ec · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger.com.ec · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 155.94.160.7 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.com.ec resolved to it 2026-11-05 05:05 UTC
- Addresses
- 155.94.160.7 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
- ColoCrossing
- ColoCrossing (155.94.160.7): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.ht US · AS36352 · HostPapaLookalike of ledger.com · the ending .com.htListed by MetaMaskColoCrossing
DetailsHide details for ledger.com.ht
- Domain
- ledger.com.ht
- Spelling
- The name of ledger.com with the ending .com.ht
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-03-03 · Key-Systems GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.ht · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 216.144.233.226 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
- ColoCrossing
- ColoCrossing (216.144.233.226): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- bitcoin-ledger-recover.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the name with an added wordReported by PhishDestroyCloudflare
DetailsHide details for bitcoin-ledger-recover.org
- Domain
- bitcoin-ledger-recover.org
- Spelling
- The name of ledger.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-02-17 · Internet Domain Service BS Corp
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · bitcoin-ledger-recover.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.81.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.188.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:bc2e2606:4700:3033::6815:5130
- Cloudflare
- Cloudflare (104.21.81.48, 172.67.188.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-bitcoin-recovery.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the name with the word “bitcoin-recovery”Reported by PhishDestroyCloudflare
DetailsHide details for ledger-bitcoin-recovery.org
- Domain
- ledger-bitcoin-recovery.org
- Spelling
- The name of ledger.com with the word “bitcoin-recovery”
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-02-17 · Internet Domain Service BS Corp
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger-bitcoin-recovery.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.95.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.170.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:aaf32606:4700:3037::6815:5fb0
- Cloudflare
- Cloudflare (104.21.95.176, 172.67.170.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.energy DE · AS202108 · UDAG united-domains GmbHLookalike of ledger.com · the ending .energyAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for ledger.energy
- Domain
- ledger.energy
- Spelling
- The name of ledger.com with the ending .energy
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-01-31 · united-domains GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 89.31.143.90 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.energy resolved to it 2026-11-05 05:05 UTC
- Addresses
- 89.31.143.90 · Germany · AS202108 UDAG united-domains GmbH
- MX
- mx00.udag.demx01.udag.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- login-ledger.com DE · AS210558 · services-1337-gmbh 1337 Ser…Lookalike of ledger.com · the name with the word “login”Address on Spamhaus DROP
DetailsHide details for login-ledger.com
- Domain
- login-ledger.com
- Spelling
- The name of ledger.com with the word “login”
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-01-29 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on Spamhaus DROP
- 194.26.192.159 is on Spamhaus DROP · login-ledger.com resolved to it 2026-11-04 17:29 UTC
- Addresses
- 194.26.192.159 · Germany · AS210558 services-1337-gmbh 1337 Services GmbH
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallet.vip US · AS18186 · Nebula Global LLCLookalike of ledgerwallet.com · the ending .vipReported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for ledgerwallet.vip
- Domain
- ledgerwallet.vip
- Spelling
- The name of ledgerwallet.com with the ending .vip
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-01-23 · Hefei Juming Network Technology Co., Ltd
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledgerwallet.vip · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 207.56.18.131 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledgerwallet.vip resolved to it 2026-11-04 17:29 UTC
- Addresses
- 207.56.18.131 · United States · AS18186 NEBULA-GLOBAL - Nebula Global LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- recovery-ledger.net CA · AS400343 · NAMESILO, L.L.C.Lookalike of ledger.com · the name with the word “recovery”Address on DomainSpoof’s phishing-host listPhishDestroy CommunityMX present
DetailsHide details for recovery-ledger.net
- Domain
- recovery-ledger.net
- Spelling
- The name of ledger.com with the word “recovery”
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-01-22 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 64.187.97.203 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · recovery-ledger.net resolved to it 2026-11-04 17:29 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 64.187.97.203 · Canada · AS400343 NAMESILONNET - NAMESILO, L.L.C.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlives.support SC · AS209101 · ipvendettainc IP Vendetta I…Lookalike of ledger.com · an added characterAddress on DomainSpoof’s phishing-host list
DetailsHide details for ledgerlives.support
- Domain
- ledgerlives.support
- Spelling
- Spelled like ledger.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .support zone file, already registered
- Registered
- 2026-01-10 · NETIM SAS
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 94.154.172.39 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledgerlives.support resolved to it 2026-11-05 00:29 UTC
- Addresses
- 94.154.172.39 · Seychelles · AS209101 ipvendettainc IP Vendetta Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.rip DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…13 addressesLookalike of ledger.com · the ending .rip4 addresses on DomainSpoof’s phishing-host listAmazon Web Services +1
DetailsHide details for ledger.rip
- Domain
- ledger.rip
- Spelling
- The name of ledger.com with the ending .rip
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-01-05 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 4 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (ledger.rip resolved to it 2026-11-05 05:05 UTC), 5.161.230.87 (ledger.rip resolved to it 2026-11-05 05:05 UTC), 5.161.47.86 (ledger.rip resolved to it 2026-11-05 05:05 UTC), 5.78.156.59 (ledger.rip resolved to it 2026-11-05 05:05 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8800:b98b:960a:a78f:de402a05:d014:179b:c400:6beb:a719:b479:c6082a05:d014:179b:c400:7aab:4bd9:38be:d2432a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:bfb2:f57d:1efe:13d92a05:d018:1d22:800:6673:f7c3:558e:5d732a05:d018:1d22:801:a216:a799:8c87:df21
- Amazon Web Services +1
- Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers. Hetzner (195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallet.live AU · AS133618 · Trellian Pty. LimitedLookalike of ledgerwallet.com · the ending .liveReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for ledgerwallet.live
- Domain
- ledgerwallet.live
- Spelling
- The name of ledgerwallet.com with the ending .live
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-11 · CommuniGal Communication Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledgerwallet.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.214 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates ledgerwallet.live to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.214): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-ledger-claim.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of microsoft.com · the name with the word “ledger-claim”Address on DomainSpoof’s phishing-host list
DetailsHide details for microsoft-ledger-claim.xyz
- Domain
- microsoft-ledger-claim.xyz
- Spelling
- The name of microsoft.com with the word “ledger-claim”
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-ledger-claim.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- invoice-lisp-ledger.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of ledger.com · the name with the word “invoice-lisp”Address on DomainSpoof’s phishing-host list
DetailsHide details for invoice-lisp-ledger.xyz
- Domain
- invoice-lisp-ledger.xyz
- Spelling
- The name of ledger.com with the word “invoice-lisp”
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · invoice-lisp-ledger.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-invoice-effects.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of ledger.com · the name with the word “invoice-effects”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-invoice-effects.xyz
- Domain
- ledger-invoice-effects.xyz
- Spelling
- The name of ledger.com with the word “invoice-effects”
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-invoice-effects.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-kibana-claim.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of ledger.com · the name with the word “kibana-claim”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-kibana-claim.xyz
- Domain
- ledger-kibana-claim.xyz
- Spelling
- The name of ledger.com with the word “kibana-claim”
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-kibana-claim.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-variable-invoice.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of ledger.com · the name with the word “variable-invoice”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-variable-invoice.xyz
- Domain
- ledger-variable-invoice.xyz
- Spelling
- The name of ledger.com with the word “variable-invoice”
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-variable-invoice.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- create-billing-ledger.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of ledger.com · the name with the word “create-billing”Address on DomainSpoof’s phishing-host list
DetailsHide details for create-billing-ledger.xyz
- Domain
- create-billing-ledger.xyz
- Spelling
- The name of ledger.com with the word “create-billing”
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-07 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · create-billing-ledger.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.green DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…13 addressesLookalike of ledger.com · the ending .green4 addresses on DomainSpoof’s phishing-host listAmazon Web Services +1
DetailsHide details for ledger.green
- Domain
- ledger.green
- Spelling
- The name of ledger.com with the ending .green
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-11-16 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 4 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (ledger.green resolved to it 2026-11-05 05:05 UTC), 5.161.230.87 (ledger.green resolved to it 2026-11-05 05:05 UTC), 5.161.47.86 (ledger.green resolved to it 2026-11-05 05:05 UTC), 5.78.156.59 (ledger.green resolved to it 2026-11-05 05:05 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8800:b98b:960a:a78f:de402a05:d014:179b:c400:6beb:a719:b479:c6082a05:d014:179b:c400:7aab:4bd9:38be:d2432a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:bfb2:f57d:1efe:13d92a05:d018:1d22:800:6673:f7c3:558e:5d732a05:d018:1d22:801:a216:a799:8c87:df21
- Amazon Web Services +1
- Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers. Hetzner (195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.report US · AS214036 · ULTAHOST-AS Ultahost, Inc.Lookalike of ledger.com · the ending .reportAddress on DomainSpoof’s phishing-host listPhishDestroy CommunityMX present
DetailsHide details for ledger.report
- Domain
- ledger.report
- Spelling
- The name of ledger.com with the ending .report
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-11-05 · Web Commerce Communications Limited dba WebNic.cc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 159.100.6.5 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.report resolved to it 2026-11-05 05:05 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 159.100.6.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- MX
- ledger.report
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.financial NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of ledger.com · the ending .financialAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for ledger.financial
- Domain
- ledger.financial
- Spelling
- The name of ledger.com with the ending .financial
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-10-31 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.financial resolved to it 2026-11-05 05:05 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- legderlive.org US · AS14618 · Amazon.com, Inc.Lookalike of ledger.com · two letters swappedReported by PhishDestroyAmazon Web ServicesMX present
DetailsHide details for legderlive.org
- Domain
- legderlive.org
- Spelling
- Spelled like ledger.com with two letters swapped
- First found
- 2026-11-03 · the day the .org zone file first listed it
- Registered
- 2025-10-26 · CNOBIN INFORMATION TECHNOLOGY LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · legderlive.org · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 34.196.13.28 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (34.196.13.28): a cloud provider. It rents servers and addresses to its customers.
- MX
- mail.happyisp.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.codes DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…13 addressesLookalike of ledger.com · the ending .codes4 addresses on DomainSpoof’s phishing-host listAmazon Web Services +1
DetailsHide details for ledger.codes
- Domain
- ledger.codes
- Spelling
- The name of ledger.com with the ending .codes
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-10-20 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 4 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (ledger.codes resolved to it 2026-11-05 05:05 UTC), 5.161.230.87 (ledger.codes resolved to it 2026-11-05 05:05 UTC), 5.161.47.86 (ledger.codes resolved to it 2026-11-05 05:05 UTC), 5.78.156.59 (ledger.codes resolved to it 2026-11-05 05:05 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8800:b98b:960a:a78f:de402a05:d014:179b:c400:6beb:a719:b479:c6082a05:d014:179b:c400:7aab:4bd9:38be:d2432a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:bfb2:f57d:1efe:13d92a05:d018:1d22:800:6673:f7c3:558e:5d732a05:d018:1d22:801:a216:a799:8c87:df21
- Amazon Web Services +1
- Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers. Hetzner (195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.pl DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of ledger.com · the ending .com.plAddress on DomainSpoof’s phishing-host listHetzner
DetailsHide details for ledger.com.pl
- Domain
- ledger.com.pl
- Spelling
- The name of ledger.com with the ending .com.pl
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-03-10 · DomainProfi GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 195.201.69.223 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.com.pl resolved to it 2026-11-05 05:05 UTC
- Addresses
- 195.201.69.223 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (195.201.69.223): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.to NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of ledger.com · the ending .toAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for ledger.to
- Domain
- ledger.to
- Spelling
- The name of ledger.com with the ending .to
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-08-18 · Tonic
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.to resolved to it 2026-11-05 05:05 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.box US · AS20473 · The Constant Company, LLC3 addressesLookalike of ledger.com · the ending .box3 addresses on DomainSpoof’s phishing-host listVultr
DetailsHide details for ledger.box
- Domain
- ledger.box
- Spelling
- The name of ledger.com with the ending .box
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-01-23 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 207.246.78.75 (ledger.box resolved to it 2026-11-05 05:05 UTC), 45.77.75.133 (ledger.box resolved to it 2026-11-05 05:05 UTC), 45.77.92.157 (ledger.box resolved to it 2026-11-05 05:05 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 45.77.75.133 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)45.77.92.157 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)207.246.78.75 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
- Vultr
- Vultr (45.77.75.133, 45.77.92.157, 207.246.78.75): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.email DE · AS8560 · IONOS-AS IONOS SELookalike of ledger.com · the ending .emailAddress on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for ledger.email
- Domain
- ledger.email
- Spelling
- The name of ledger.com with the ending .email
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2015-02-15 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 213.171.195.105 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.email resolved to it 2026-11-05 05:05 UTC
- Addresses
- 213.171.195.105 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
- IONOS
- IONOS (213.171.195.105): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mailserver.livemail.co.uk
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallet.com.cn HK · AS135357 · HONG KONG KOWLOON TELECOMMU…Lookalike of ledgerwallet.com · the ending .com.cnListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for ledgerwallet.com.cn
- Domain
- ledgerwallet.com.cn
- Spelling
- The name of ledgerwallet.com with the ending .com.cn
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledgerwallet.com.cn · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledgerwallet.com.cn · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 206.161.218.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledgerwallet.com.cn resolved to it 2026-11-05 05:06 UTC
- Addresses
- 206.161.218.138 · Hong Kong · AS135357 PCCW22-HK - HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.sv FR · AS24935 · ATE-AS Eurofiber France SASLookalike of ledger.com · the ending .com.svAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for ledger.com.sv
- Domain
- ledger.com.sv
- Spelling
- The name of ledger.com with the ending .com.sv
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 185.26.106.234 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.com.sv resolved to it 2026-11-05 05:05 UTC
- Addresses
- 185.26.106.234 · France · AS24935 ATE-AS Eurofiber France SAS
- MX
- mx1.netim.netmx2.netim.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.org.im HK · AS135357 · HONG KONG KOWLOON TELECOMMU…Lookalike of ledger.com · the ending .org.imListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for ledger.org.im
- Domain
- ledger.org.im
- Spelling
- The name of ledger.com with the ending .org.im
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.org.im · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger.org.im · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 206.161.218.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.org.im resolved to it 2026-11-05 05:05 UTC
- Addresses
- 206.161.218.138 · Hong Kong · AS135357 PCCW22-HK - HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallet.at CH · AS29097 · HOSTPOINT-AS Hostpoint AG2 addressesLookalike of ledgerwallet.com · the ending .atAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for ledgerwallet.at
- Domain
- ledgerwallet.at
- Spelling
- The name of ledgerwallet.com with the ending .at
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 217.26.48.101 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledgerwallet.at resolved to it 2026-11-05 05:06 UTC
- Addresses
- 217.26.48.101 · Switzerland · AS29097 HOSTPOINT-AS Hostpoint AG2a00:d70:0:a::166
- MX
- mx1.mail.hostpoint.chmx2.mail.hostpoint.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallet.im HK · AS135357 · HONG KONG KOWLOON TELECOMMU…Lookalike of ledgerwallet.com · the ending .imSubdomain reported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for ledgerwallet.im
- Domain
- ledgerwallet.im
- Spelling
- The name of ledgerwallet.com with the ending .im
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Subdomain reported by PhishDestroy
- Reported by PhishDestroy · web3.ledgerwallet.im under ledgerwallet.im · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 206.161.218.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledgerwallet.im resolved to it 2026-11-05 05:06 UTC
- Addresses
- 206.161.218.138 · Hong Kong · AS135357 PCCW22-HK - HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.am US · AS396982 · Google LLCLookalike of ledger.com · the ending .com.amListed by MetaMaskReported by PhishDestroyGoogle Cloud
DetailsHide details for ledger.com.am
- Domain
- ledger.com.am
- Spelling
- The name of ledger.com with the ending .com.am
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.am · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger.com.am · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 136.65.148.138 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
- Google Cloud
- Google Cloud (136.65.148.138): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.gr 127.0.0.1Lookalike of ledger.com · the ending .com.grListed by MetaMaskParking page · Netim hold page
DetailsHide details for ledger.com.gr
- Domain
- ledger.com.gr
- Spelling
- The name of ledger.com with the ending .com.gr
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.gr · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 127.0.0.1
- Parking page · Netim hold page
- The registry delegates ledger.com.gr to Netim hold page’s nameservers, which answer for it. Netim hold page: a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.kg US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · the ending .com.kgListed by MetaMaskAmazon Web Services
DetailsHide details for ledger.com.kg
- Domain
- ledger.com.kg
- Spelling
- The name of ledger.com with the ending .com.kg
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.kg · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.198.79.1, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.ki FR · AS16276 · OVH OVH SASLookalike of ledger.com · the ending .com.kiListed by MetaMaskParking page · emailverification.info suspended-domain page
DetailsHide details for ledger.com.ki
- Domain
- ledger.com.ki
- Spelling
- The name of ledger.com with the ending .com.ki
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.ki · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 54.38.220.85 · France · AS16276 OVH OVH SAS · emailverification.info suspended-domain page (parking page)
- Parking page · emailverification.info suspended-domain page
- The registry delegates ledger.com.ki to emailverification.info suspended-domain page’s nameservers, which answer for it. emailverification.info suspended-domain page (54.38.220.85): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.mk US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the ending .com.mkListed by MetaMaskCloudflare
DetailsHide details for ledger.com.mk
- Domain
- ledger.com.mk
- Spelling
- The name of ledger.com with the ending .com.mk
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.mk · in the feed since 2026-10-29 23:38 UTC
- Addresses
- 104.21.18.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.183.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:b71a2606:4700:3036::6815:12b5
- Cloudflare
- Cloudflare (104.21.18.181, 172.67.183.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.sl 127.0.0.1Lookalike of ledger.com · the ending .com.slListed by MetaMaskParking page · Netim hold page
DetailsHide details for ledger.com.sl
- Domain
- ledger.com.sl
- Spelling
- The name of ledger.com with the ending .com.sl
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.sl · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 127.0.0.1
- Parking page · Netim hold page
- The registry delegates ledger.com.sl to Netim hold page’s nameservers, which answer for it. Netim hold page: a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.so US · AS396982 · Google LLCLookalike of ledger.com · the ending .com.soListed by MetaMaskReported by PhishDestroyGoogle Cloud
DetailsHide details for ledger.com.so
- Domain
- ledger.com.so
- Spelling
- The name of ledger.com with the ending .com.so
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.so · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger.com.so · in the feed since 2026-10-29 05:36 UTC
- Addresses
- 136.65.148.138 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
- Google Cloud
- Google Cloud (136.65.148.138): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.tn US · AS20473 · The Constant Company, LLCLookalike of ledger.com · the ending .com.tnListed by MetaMaskVultr
DetailsHide details for ledger.com.tn
- Domain
- ledger.com.tn
- Spelling
- The name of ledger.com with the ending .com.tn
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.tn · in the feed since 2026-10-28 17:36 UTC
- Addresses
- 45.76.33.11 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
- Vultr
- Vultr (45.76.33.11): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.ttLookalike of ledger.com · the ending .com.ttListed by MetaMask
DetailsHide details for ledger.com.tt
- Domain
- ledger.com.tt
- Spelling
- The name of ledger.com with the ending .com.tt
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.com.tt · in the feed since 2026-10-27 05:34 UTC
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.gl US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the ending .glListed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for ledger.gl
- Domain
- ledger.gl
- Spelling
- The name of ledger.com with the ending .gl
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.gl · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger.gl · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.72.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.179.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:b3752606:4700:3037::6815:485b
- Cloudflare
- Cloudflare (104.21.72.91, 172.67.179.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.jp JP · AS7506 · GMO Internet, Inc.Lookalike of ledger.com · the ending .jpAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for ledger.jp
- Domain
- ledger.jp
- Spelling
- The name of ledger.com with the ending .jp
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 118.27.125.203 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.jp resolved to it 2026-11-05 05:05 UTC
- Addresses
- 118.27.125.203 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- MX
- mx01.lolipop.jp
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.net.cn CN · AS38283 · CHINANET SiChuan Telecom In…Lookalike of ledger.com · the ending .net.cnListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for ledger.net.cn
- Domain
- ledger.net.cn
- Spelling
- The name of ledger.com with the ending .net.cn
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger.net.cn · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger.net.cn · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 211.149.167.228 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger.net.cn resolved to it 2026-11-05 05:05 UTC
- Addresses
- 211.149.167.228 · China · AS38283 CHINANET-SCIDC-AS-AP - CHINANET SiChuan Telecom Internet Data Center
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.xn--fiqs8s CN · AS24429 · Zhejiang Taobao Network Co.…10 addressesLookalike of ledger.com · the ending .xn--fiqs8s8 addresses on DomainSpoof’s phishing-host list
DetailsHide details for ledger.xn--fiqs8s
- Domain
- ledger.xn--fiqs8s
- Spelling
- The name of ledger.com with the ending .xn--fiqs8s
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 8 addresses on DomainSpoof’s phishing-host list
- 163.181.246.188 (ledger.xn--fiqs8s resolved to it 2026-11-05 05:05 UTC), 163.181.246.189 (ledger.xn--fiqs8s resolved to it 2026-11-05 05:05 UTC), 163.181.246.190 (ledger.xn--fiqs8s resolved to it 2026-11-05 05:05 UTC), 163.181.246.191 (ledger.xn--fiqs8s resolved to it 2026-11-05 05:05 UTC), 163.181.246.192 (ledger.xn--fiqs8s resolved to it 2026-11-05 05:05 UTC), 163.181.246.193 (ledger.xn--fiqs8s resolved to it 2026-11-05 05:05 UTC), 163.181.246.194 (ledger.xn--fiqs8s resolved to it 2026-11-05 05:05 UTC), 163.181.246.195 (ledger.xn--fiqs8s resolved to it 2026-11-05 05:05 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 163.181.246.188 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd163.181.246.189 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd163.181.246.190 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd163.181.246.191 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd163.181.246.192 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd163.181.246.193 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd163.181.246.194 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd163.181.246.195 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd2404:2280:180:0:3::c2404:2280:180:0:3::d
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.best US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · the ending .bestAmazon Web Services
DetailsHide details for ledger.best
- Domain
- ledger.best
- Spelling
- The name of ledger.com with the ending .best
- First found
- 2026-11-03 · the day the .best zone file first listed it as a new registration
- Registered
- 2026-11-02 · Spaceship, Inc.
- Addresses
- 44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.singlesLookalike of ledger.com · the ending .singlesNo address or mail server yet
DetailsHide details for ledger.singles
- Domain
- ledger.singles
- Spelling
- The name of ledger.com with the ending .singles
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-30 · Spaceship, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.coursesLookalike of ledger.com · the ending .coursesNo address or mail server yet
DetailsHide details for ledger.courses
- Domain
- ledger.courses
- Spelling
- The name of ledger.com with the ending .courses
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-28 · Spaceship, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.haus US · AS13335 · Cloudflare, Inc.2 addressesLookalike of ledger.com · the ending .hausCloudflare
DetailsHide details for ledger.haus
- Domain
- ledger.haus
- Spelling
- The name of ledger.com with the ending .haus
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-26 · Cloudflare, Inc
- Addresses
- 162.159.143.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.3.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (162.159.143.30, 172.66.3.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- recover-ledger.support DE · AS51167 · CONTABO Contabo GmbHLookalike of ledger.com · the name with the word “recover”Registry lookup queuedContabo
DetailsHide details for recover-ledger.support
- Domain
- recover-ledger.support
- Spelling
- The name of ledger.com with the word “recover”
- First found
- 2026-11-01 · the day we first found it in the .support zone file, already registered
- Registered
- 2026-10-23 · GoDaddy.com, LLC
- Addresses
- 80.241.213.225 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
- Contabo
- Contabo (80.241.213.225): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.babyLookalike of ledger.com · the ending .babyNo address or mail server yet
DetailsHide details for ledger.baby
- Domain
- ledger.baby
- Spelling
- The name of ledger.com with the ending .baby
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-23 · Spaceship, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- recovery-ledger.live US · AS13335 · Cloudflare, Inc.2 addressesLookalike of ledger.com · the name with the word “recovery”Cloudflare
DetailsHide details for recovery-ledger.live
- Domain
- recovery-ledger.live
- Spelling
- The name of ledger.com with the word “recovery”
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-22 · Dynadot Inc
- Addresses
- 104.21.52.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.196.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.52.70, 172.67.196.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.restLookalike of ledger.com · the ending .restNo address or mail server yet
DetailsHide details for ledger.rest
- Domain
- ledger.rest
- Spelling
- The name of ledger.com with the ending .rest
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-21 · Spaceship, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-verification.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the name with the word “verification”Cloudflare
DetailsHide details for ledger-verification.org
- Domain
- ledger-verification.org
- Spelling
- The name of ledger.com with the word “verification”
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-20 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 104.21.74.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.158.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:4a8b2606:4700:3033::ac43:9ef9
- Cloudflare
- Cloudflare (104.21.74.139, 172.67.158.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallet.com.ai CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of ledgerwallet.com · the ending .com.aiHostinger
DetailsHide details for ledgerwallet.com.ai
- Domain
- ledgerwallet.com.ai
- Spelling
- The name of ledgerwallet.com with the ending .com.ai
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-16 · Cloudflare, Inc
- Addresses
- 187.124.119.58 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (187.124.119.58): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.fansLookalike of ledger.com · the ending .fansNo address or mail server yet
DetailsHide details for ledger.fans
- Domain
- ledger.fans
- Spelling
- The name of ledger.com with the ending .fans
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-14 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.ngo PL · AS47544 · IQPL-AS IQ PL Sp. z o.o.Lookalike of ledger.com · the ending .ngo
DetailsHide details for ledger.ngo
- Domain
- ledger.ngo
- Spelling
- The name of ledger.com with the ending .ngo
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-14 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 185.110.51.40 · Poland · AS47544 IQPL-AS IQ PL Sp. z o.o.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.sarlLookalike of ledger.com · the ending .sarlNo address or mail server yet
DetailsHide details for ledger.sarl
- Domain
- ledger.sarl
- Spelling
- The name of ledger.com with the ending .sarl
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-11 · Cloudflare, Inc
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.boutique US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the ending .boutiqueCloudflare
DetailsHide details for ledger.boutique
- Domain
- ledger.boutique
- Spelling
- The name of ledger.com with the ending .boutique
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-08 · Spaceship, Inc.
- Addresses
- 104.21.84.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.198.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:54f02606:4700:3036::ac43:c6e5
- Cloudflare
- Cloudflare (104.21.84.240, 172.67.198.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledegrlive.trade US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · two letters swappedCloudflare
DetailsHide details for ledegrlive.trade
- Domain
- ledegrlive.trade
- Spelling
- Spelled like ledger.com with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .trade zone file, already registered
- Registered
- 2026-10-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.89.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.162.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:59a92606:4700:3033::ac43:a238
- Cloudflare
- Cloudflare (104.21.89.169, 172.67.162.56): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.ss US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the ending .ssCloudflare
DetailsHide details for ledger.ss
- Domain
- ledger.ss
- Spelling
- The name of ledger.com with the ending .ss
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-07 · Afriregister South Sudan
- Addresses
- 104.21.51.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.182.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:b6822606:4700:3035::6815:33a0
- Cloudflare
- Cloudflare (104.21.51.160, 172.67.182.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.nf US · AS214036 · ULTAHOST-AS Ultahost, Inc.Lookalike of ledger.com · the ending .com.nf
DetailsHide details for ledger.com.nf
- Domain
- ledger.com.nf
- Spelling
- The name of ledger.com with the ending .com.nf
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-06 · Key-Systems GmbH
- Addresses
- 89.187.25.237 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.wine US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · the ending .wineAmazon Web Services
DetailsHide details for ledger.wine
- Domain
- ledger.wine
- Spelling
- The name of ledger.com with the ending .wine
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-03 · Spaceship, Inc.
- Addresses
- 34.216.117.25 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)54.149.79.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (34.216.117.25, 54.149.79.189): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallet.tw US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledgerwallet.com · the ending .twCloudflare
DetailsHide details for ledgerwallet.tw
- Domain
- ledgerwallet.tw
- Spelling
- The name of ledgerwallet.com with the ending .tw
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-22 · Dynadot LLC
- Addresses
- 104.21.75.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:4bb52606:4700:3035::ac43:b41a
- Cloudflare
- Cloudflare (104.21.75.181, 172.67.180.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.videoLookalike of ledger.com · the ending .videoNo address or mail server yet
DetailsHide details for ledger.video
- Domain
- ledger.video
- Spelling
- The name of ledger.com with the ending .video
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-21 · Hefei Juming Network Technology Co., Ltd
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-refund.comLookalike of ledger.com · the name with the word “refund”MX present
DetailsHide details for ledger-refund.com
- Domain
- ledger-refund.com
- Spelling
- The name of ledger.com with the word “refund”
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-11 · NameSilo, LLC
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwallet.spaceLookalike of ledgerwallet.com · the ending .spaceNo address or mail server yet
DetailsHide details for ledgerwallet.space
- Domain
- ledgerwallet.space
- Spelling
- The name of ledgerwallet.com with the ending .space
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-06 · Hefei Juming Network Technology Co., Ltd
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.bio AU · AS133618 · Trellian Pty. LimitedLookalike of ledger.com · the ending .bioParking page · Above.comMX present
DetailsHide details for ledger.bio
- Domain
- ledger.bio
- Spelling
- The name of ledger.com with the ending .bio
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-05 · CommuniGal Communication Ltd.
- Addresses
- 103.224.212.215 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates ledger.bio to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.215): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.realestate US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · the ending .realestateAmazon Web Services
DetailsHide details for ledger.realestate
- Domain
- ledger.realestate
- Spelling
- The name of ledger.com with the ending .realestate
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-05 · GoDaddy.com, LLC
- Addresses
- 3.33.251.168 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.225.128 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.251.168, 15.197.225.128): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.vision US · AS14618 · Amazon.com, Inc.Lookalike of ledger.com · the ending .visionParking page · Atom
DetailsHide details for ledger.vision
- Domain
- ledger.vision
- Spelling
- The name of ledger.com with the ending .vision
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-05 · Dynadot Inc
- Addresses
- 52.20.84.62 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Atom (parking page)
- Parking page · Atom
- The registry delegates ledger.vision to Atom’s nameservers, which answer for it. Atom (52.20.84.62): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerolive.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · an added characterParking page · Afternic
DetailsHide details for ledgerolive.xyz
- Domain
- ledgerolive.xyz
- Spelling
- Spelled like ledger.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-04 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ledgerolive.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.credit US · AS14618 · Amazon.com, Inc.Lookalike of ledger.com · the ending .creditParking page · Atom
DetailsHide details for ledger.credit
- Domain
- ledger.credit
- Spelling
- The name of ledger.com with the ending .credit
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-02 · Dynadot Inc
- Addresses
- 52.20.84.62 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Atom (parking page)
- Parking page · Atom
- The registry delegates ledger.credit to Atom’s nameservers, which answer for it. Atom (52.20.84.62): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.football US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · the ending .footballAmazon Web Services
DetailsHide details for ledger.football
- Domain
- ledger.football
- Spelling
- The name of ledger.com with the ending .football
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-31 · Name.com, Inc.
- Addresses
- 216.150.1.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.150.16.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.150.1.193, 216.150.16.1): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.com.vc US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the ending .com.vcCloudflare
DetailsHide details for ledger.com.vc
- Domain
- ledger.com.vc
- Spelling
- The name of ledger.com with the ending .com.vc
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.72.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.154.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:48d32606:4700:3037::ac43:9afe
- Cloudflare
- Cloudflare (104.21.72.211, 172.67.154.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.guru US · AS14618 · Amazon.com, Inc.Lookalike of ledger.com · the ending .guruParking page · Atom
DetailsHide details for ledger.guru
- Domain
- ledger.guru
- Spelling
- The name of ledger.com with the ending .guru
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-18 · Dynadot Inc
- Addresses
- 52.20.84.62 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Atom (parking page)
- Parking page · Atom
- The registry delegates ledger.guru to Atom’s nameservers, which answer for it. Atom (52.20.84.62): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.observer US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ledger.com · the ending .observerCloudflareMX present
DetailsHide details for ledger.observer
- Domain
- ledger.observer
- Spelling
- The name of ledger.com with the ending .observer
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-16 · Cloudflare
- Addresses
- 104.21.20.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.193.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:c1422606:4700:3037::6815:14ad
- Cloudflare
- Cloudflare (104.21.20.173, 172.67.193.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route2.mx.cloudflare.netroute1.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.fashion US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ledger.com · the ending .fashionParking page · Afternic
DetailsHide details for ledger.fashion
- Domain
- ledger.fashion
- Spelling
- The name of ledger.com with the ending .fashion
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-15 · Chengdu West Dimension Digital Technology Co., Ltd.
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ledger.fashion to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.school RU · AS197695 · AS-REGRU "Domain names regi…2 addressesLookalike of ledger.com · the ending .schoolMX present
DetailsHide details for ledger.school
- Domain
- ledger.school
- Spelling
- The name of ledger.com with the ending .school
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-13 · Registrar of Domain Names REG.RU LLC
- Addresses
- 31.31.197.48 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd2a00:f940:2:2:1:1:0:297
- MX
- mx1.hosting.reg.rumx2.hosting.reg.ru
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger.ltda RO · AS9009 · M247 M247 Europe SRLLookalike of ledger.com · the ending .ltdaMX present
DetailsHide details for ledger.ltda
- Domain
- ledger.ltda
- Spelling
- The name of ledger.com with the ending .ltda
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-12 · Key-Systems, LLC
- Addresses
- 149.33.28.54 · Romania · AS9009 M247 M247 Europe SRL
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Ledger's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
100 of 137 shown: listed ones first, then the newest registrations.
- ledger-wallet.team SG · AS63949 · Akamai Connected Cloud3 addressesContains “ledger-wallet”3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for ledger-wallet.team
- Domain
- ledger-wallet.team
- Match
- A domain containing “ledger-wallet”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .team zone file, already registered
- Registered
- 2026-10-22 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (ledger-wallet.team resolved to it 2026-11-05 00:29 UTC), 172.232.24.235 (ledger-wallet.team resolved to it 2026-11-05 00:29 UTC), 172.234.25.42 (ledger-wallet.team resolved to it 2026-11-05 00:29 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlive.team SG · AS63949 · Akamai Connected Cloud3 addressesContains “ledgerlive”3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for ledgerlive.team
- Domain
- ledgerlive.team
- Match
- A domain containing “ledgerlive”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .team zone file, already registered
- Registered
- 2026-10-22 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (ledgerlive.team resolved to it 2026-11-05 00:29 UTC), 172.232.24.235 (ledgerlive.team resolved to it 2026-11-05 00:29 UTC), 172.234.25.42 (ledgerlive.team resolved to it 2026-11-05 00:29 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlive-app.site SG · AS63949 · Akamai Connected Cloud3 addressesContains “ledgerlive”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for ledgerlive-app.site
- Domain
- ledgerlive-app.site
- Match
- A registered domain containing “ledgerlive”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-08-22 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (ledgerlive-app.site resolved to it 2026-11-05 00:29 UTC), 172.232.24.235 (ledgerlive-app.site resolved to it 2026-11-05 00:29 UTC), 172.234.25.42 (ledgerlive-app.site resolved to it 2026-11-05 00:29 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlive.cloud CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “ledgerlive”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for ledgerlive.cloud
- Domain
- ledgerlive.cloud
- Match
- A domain containing “ledgerlive”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-08-14 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledgerlive.cloud resolved to it 2026-11-05 00:29 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx.zoho.commx2.zoho.commx3.zoho.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- v1-ledgerlive.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerlive”Listed by MetaMaskCloudflare
DetailsHide details for v1-ledgerlive.org
- Domain
- v1-ledgerlive.org
- Match
- A domain containing “ledgerlive”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-08-06 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · v1-ledgerlive.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.23.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:17592606:4700:3033::ac43:d1df
- Cloudflare
- Cloudflare (104.21.23.89, 172.67.209.223): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- web-ledgerlive.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerlive”Listed by MetaMaskCloudflare
DetailsHide details for web-ledgerlive.org
- Domain
- web-ledgerlive.org
- Match
- A domain containing “ledgerlive”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-08-03 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · web-ledgerlive.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.49.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.162.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:316e2606:4700:3035::ac43:a202
- Cloudflare
- Cloudflare (104.21.49.110, 172.67.162.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-ledgerwallet.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerwallet”Listed by MetaMaskCloudflare
DetailsHide details for app-ledgerwallet.org
- Domain
- app-ledgerwallet.org
- Match
- A domain containing “ledgerwallet”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-07-29 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · app-ledgerwallet.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.4.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.132.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:4a92606:4700:3036::ac43:8448
- Cloudflare
- Cloudflare (104.21.4.169, 172.67.132.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-live.click US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger-live”Reported by PhishDestroyCloudflare
DetailsHide details for ledger-live.click
- Domain
- ledger-live.click
- Match
- A domain containing “ledger-live”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2026-07-29 · Name.com, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger-live.click · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.10.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.190.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:a782606:4700:3035::ac43:be22
- Cloudflare
- Cloudflare (104.21.10.120, 172.67.190.34): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- my-ledgerwallet.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerwallet”Listed by MetaMaskCloudflare
DetailsHide details for my-ledgerwallet.org
- Domain
- my-ledgerwallet.org
- Match
- A domain containing “ledgerwallet”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-07-29 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · my-ledgerwallet.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.15.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.161.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:a1f72606:4700:3037::6815:f52
- Cloudflare
- Cloudflare (104.21.15.82, 172.67.161.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- new-ledgerwallet.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerwallet”Listed by MetaMaskCloudflare
DetailsHide details for new-ledgerwallet.org
- Domain
- new-ledgerwallet.org
- Match
- A domain containing “ledgerwallet”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-07-29 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · new-ledgerwallet.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.37.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.202.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:25052606:4700:3034::ac43:ca27
- Cloudflare
- Cloudflare (104.21.37.5, 172.67.202.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-wallet.siteContains “ledger-wallet”Listed by MetaMask
DetailsHide details for ledger-wallet.site
- Domain
- ledger-wallet.site
- Match
- A domain containing “ledger-wallet”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-05-30 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledger-wallet.site · in the feed since 2026-10-27 05:34 UTC
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-update.online US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for ledger-update.online
- Domain
- ledger-update.online
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-05-17 · Ultahost, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 159.100.6.19 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-update.online resolved to it 2026-11-05 00:29 UTC
- Addresses
- 159.100.6.19 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- MX
- ledger-update.online
- Daily check
- Ended 2026-11-04 22:41 UTC
- vvww-ledgerwallet.live US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerwallet”Reported by PhishDestroyCloudflare
DetailsHide details for vvww-ledgerwallet.live
- Domain
- vvww-ledgerwallet.live
- Match
- A domain containing “ledgerwallet”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-04-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · vvww-ledgerwallet.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.94.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:87fd2606:4700:3037::6815:5e80
- Cloudflare
- Cloudflare (104.21.94.128, 172.67.135.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-connect.site DE · AS47846 · SEDO-AS SEDO GmbHContains “ledger”Subdomain reported by PhishDestroyParking page · Sedo
DetailsHide details for ledger-connect.site
- Domain
- ledger-connect.site
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-02-06 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Subdomain reported by PhishDestroy
- Reported by PhishDestroy · wallet.ledger-connect.site under ledger-connect.site · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- security-ledger-victory.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for security-ledger-victory.xyz
- Domain
- security-ledger-victory.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · security-ledger-victory.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- software-ledger.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for software-ledger.xyz
- Domain
- software-ledger.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · software-ledger.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-bitcoin.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-bitcoin.xyz
- Domain
- ledger-bitcoin.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-bitcoin.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-catalog-account.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-catalog-account.xyz
- Domain
- ledger-catalog-account.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-catalog-account.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-dashboard.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-dashboard.xyz
- Domain
- ledger-dashboard.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-dashboard.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-finance.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-finance.xyz
- Domain
- ledger-finance.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-finance.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-implements-backup.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-implements-backup.xyz
- Domain
- ledger-implements-backup.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-implements-backup.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-return.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-return.xyz
- Domain
- ledger-return.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-return.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-security.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-security.xyz
- Domain
- ledger-security.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-security.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-soft.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-soft.xyz
- Domain
- ledger-soft.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-soft.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-wallet.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger-wallet”Address on DomainSpoof’s phishing-host list
DetailsHide details for ledger-wallet.xyz
- Domain
- ledger-wallet.xyz
- Match
- A registered domain containing “ledger-wallet”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-wallet.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- delete-ledger.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for delete-ledger.xyz
- Domain
- delete-ledger.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · delete-ledger.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- encrypt-online-ledger.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for encrypt-online-ledger.xyz
- Domain
- encrypt-online-ledger.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · encrypt-online-ledger.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- extends-ledger-service.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for extends-ledger-service.xyz
- Domain
- extends-ledger-service.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · extends-ledger-service.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- global-admin-ledger.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for global-admin-ledger.xyz
- Domain
- global-admin-ledger.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · global-admin-ledger.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- address-plugin-ledger.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for address-plugin-ledger.xyz
- Domain
- address-plugin-ledger.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-07 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · address-plugin-ledger.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- api-ledger.xyz JP · AS7506 · GMO Internet, Inc.Contains “ledger”Address on DomainSpoof’s phishing-host list
DetailsHide details for api-ledger.xyz
- Domain
- api-ledger.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-07 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · api-ledger.xyz resolved to it 2026-11-05 00:29 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlive.info SG · AS63949 · Akamai Connected Cloud3 addressesContains “ledgerlive”Reported by PhishDestroyAkamai LinodeParking page · ParkLogic
DetailsHide details for ledgerlive.info
- Domain
- ledgerlive.info
- Match
- A domain containing “ledgerlive”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2025-10-14 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledgerlive.info · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 172.236.104.43 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.236.104.157 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.238.172.122 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.236.104.43, 172.236.104.157, 172.238.172.122): a cloud provider. It rents servers and addresses to its customers.
- Parking page · ParkLogic
- The registry delegates ledgerlive.info to ParkLogic’s nameservers, which answer for it. ParkLogic: a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlive.claims US · AS16509 · Amazon.com, Inc.2 addressesContains “ledgerlive”Listed by MetaMaskReported by PhishDestroyAmazon Web Services
DetailsHide details for ledgerlive.claims
- Domain
- ledgerlive.claims
- Match
- A domain containing “ledgerlive”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .claims zone file, already registered
- Registered
- 2025-10-04 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ledgerlive.claims · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledgerlive.claims · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 44.233.250.75 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)52.38.196.63 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.233.250.75, 52.38.196.63): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-live-download.org AU · AS133618 · Trellian Pty. LimitedContains “ledger-live”Reported by PhishDestroyParking page · Trellian / Above.comMX present
DetailsHide details for ledger-live-download.org
- Domain
- ledger-live-download.org
- Match
- A domain containing “ledger-live”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2024-12-28 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger-live-download.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.182.253 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Trellian / Above.com
- Trellian / Above.com (103.224.182.253): a parking service. It answers for names that are typically for sale or unused.
- MX
- alltheemails.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-live-desktop-app.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger-live”Reported by PhishDestroyCloudflare
DetailsHide details for ledger-live-desktop-app.org
- Domain
- ledger-live-desktop-app.org
- Match
- A domain containing “ledger-live”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2024-10-12 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ledger-live-desktop-app.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.37.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.206.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:cede2606:4700:3035::6815:2562
- Cloudflare
- Cloudflare (104.21.37.98, 172.67.206.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-authorize.live US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for ledger-authorize.live
- Domain
- ledger-authorize.live
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-10-26 · Eranet International Limited
- Addresses
- 104.21.54.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.140.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:8cad2606:4700:3035::6815:36a8
- Cloudflare
- Cloudflare (104.21.54.168, 172.67.140.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-updates.live US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for ledger-updates.live
- Domain
- ledger-updates.live
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-10-20 · Dynadot Inc
- Addresses
- 104.21.91.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.182.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:b62d2606:4700:3035::6815:5bf6
- Cloudflare
- Cloudflare (104.21.91.246, 172.67.182.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- download-ledger.online SG · AS63949 · Akamai Connected Cloud8 addressesContains “ledger”Parking page · Shared parking page
DetailsHide details for download-ledger.online
- Domain
- download-ledger.online
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-10-16 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)2600:3c03::f03c:95ff:fe00:29ca2600:3c03::f03c:95ff:fe91:5d522600:3c03::f03c:95ff:feed:4d4f2600:3c03::f03c:95ff:feed:cf2a
- Parking page · Shared parking page
- Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-online.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for ledger-online.org
- Domain
- ledger-online.org
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-10-16 · Cloudflare, Inc.
- Addresses
- 104.21.84.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:54102606:4700:3037::ac43:b8c2
- Cloudflare
- Cloudflare (104.21.84.16, 172.67.184.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-sync.xyzContains “ledger”No address or mail server yet
DetailsHide details for ledger-sync.xyz
- Domain
- ledger-sync.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-10-16 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- firmware-ledger.appContains “ledger”No address or mail server yet
DetailsHide details for firmware-ledger.app
- Domain
- firmware-ledger.app
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-10-14 · GMO Internet Inc.d/b/a Onamae.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- api-ledgerwallet.live US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerwallet”CloudflareMX present
DetailsHide details for api-ledgerwallet.live
- Domain
- api-ledgerwallet.live
- Match
- A registered domain containing “ledgerwallet”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-10-04 · Cloudflare, Inc
- Addresses
- 104.21.61.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:3d6f2606:4700:3037::ac43:d198
- Cloudflare
- Cloudflare (104.21.61.111, 172.67.209.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route3.mx.cloudflare.netroute2.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-live.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger-live”Cloudflare
DetailsHide details for ledger-live.xyz
- Domain
- ledger-live.xyz
- Match
- A registered domain containing “ledger-live”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-09-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.81.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.141.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:51652606:4700:3037::ac43:8da4
- Cloudflare
- Cloudflare (104.21.81.101, 172.67.141.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-wallet.icuContains “ledger-wallet”
DetailsHide details for ledger-wallet.icu
- Domain
- ledger-wallet.icu
- Match
- A registered domain containing “ledger-wallet”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .icu zone file copy it was found in
- Registered
- 2026-09-15 · Gname.com Pte. Ltd.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerwalletsite.online US · AS16509 · Amazon.com, Inc.2 addressesContains “ledgerwallet”Registry lookup queuedAmazon Web Services
DetailsHide details for ledgerwalletsite.online
- Domain
- ledgerwalletsite.online
- Match
- A registered domain containing “ledgerwallet”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-09-14 · GoDaddy.com, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-contact.site US · AS16509 · Amazon.com, Inc.2 addressesContains “ledger”Registry lookup queuedAmazon Web ServicesMX present
DetailsHide details for ledger-contact.site
- Domain
- ledger-contact.site
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-09-12 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- ledgercontact-site01e.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-help.site US · AS16509 · Amazon.com, Inc.2 addressesContains “ledger”PhishDestroy CommunitySuspicious · highRegistry lookup queuedAmazon Web ServicesMX present
DetailsHide details for ledger-help.site
- Domain
- ledger-help.site
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-09-12 · GoDaddy.com, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- ledgerhelp-site01e.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-protection.site US · AS16509 · Amazon.com, Inc.2 addressesContains “ledger”Registry lookup queuedAmazon Web ServicesMX present
DetailsHide details for ledger-protection.site
- Domain
- ledger-protection.site
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-09-12 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- ledgerprotection-site01e.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-security.site US · AS16509 · Amazon.com, Inc.2 addressesContains “ledger”Registry lookup queuedAmazon Web ServicesMX present
DetailsHide details for ledger-security.site
- Domain
- ledger-security.site
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-09-12 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- ledgersecurity-site01e.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-update.site US · AS16509 · Amazon.com, Inc.2 addressesContains “ledger”Registry lookup queuedAmazon Web ServicesMX present
DetailsHide details for ledger-update.site
- Domain
- ledger-update.site
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-09-12 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- ledgerupdate-site01e.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-portal.live US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for ledger-portal.live
- Domain
- ledger-portal.live
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-09-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.51.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.177.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:334f2606:4700:3030::ac43:b163
- Cloudflare
- Cloudflare (104.21.51.79, 172.67.177.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- shoukuan-ledger.online US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for shoukuan-ledger.online
- Domain
- shoukuan-ledger.online
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-09-07 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- Addresses
- 104.21.35.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:b43b2606:4700:3035::6815:23dc
- Cloudflare
- Cloudflare (104.21.35.220, 172.67.180.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-shield.live RO · AS218721 · HSTX HOSTOX GROUP S.R.L.Contains “ledger”
DetailsHide details for ledger-shield.live
- Domain
- ledger-shield.live
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-09-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 87.58.220.92 · Romania · AS218721 HSTX HOSTOX GROUP S.R.L.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-wallet.websiteContains “ledger-wallet”No address or mail server yet
DetailsHide details for ledger-wallet.website
- Domain
- ledger-wallet.website
- Match
- A registered domain containing “ledger-wallet”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .website zone file copy it was found in
- Registered
- 2026-09-05 · Hefei Juming Network Technology Co., Ltd
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- host-wallet-ledger.site US · AS13335 · Cloudflare, Inc.2 addressesContains “ledger”Cloudflare
DetailsHide details for host-wallet-ledger.site
- Domain
- host-wallet-ledger.site
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-08-31 · CV. Rumahweb Indonesia
- Addresses
- 162.159.143.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.3.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (162.159.143.30, 172.66.3.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-notif.infoContains “ledger”No address or mail server yet
DetailsHide details for ledger-notif.info
- Domain
- ledger-notif.info
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-08-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-recovered.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for ledger-recovered.app
- Domain
- ledger-recovered.app
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-08-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.2.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.129.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:81782606:4700:3037::6815:2a8
- Cloudflare
- Cloudflare (104.21.2.168, 172.67.129.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- help-ledger.info US · AS16509 · Amazon.com, Inc.2 addressesContains “ledger”Registry lookup queuedAmazon Web Services
DetailsHide details for help-ledger.info
- Domain
- help-ledger.info
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-08-11 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- connect-ledger.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “ledger”Parking page · Afternic
DetailsHide details for connect-ledger.xyz
- Domain
- connect-ledger.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-08-09 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates connect-ledger.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- my-ledger-live.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger-live”Cloudflare
DetailsHide details for my-ledger-live.org
- Domain
- my-ledger-live.org
- Match
- A registered domain containing “ledger-live”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-08-08 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 104.21.50.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.207.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:cf772606:4700:3035::6815:32a6
- Cloudflare
- Cloudflare (104.21.50.166, 172.67.207.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- cloud2ledger.online US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for cloud2ledger.online
- Domain
- cloud2ledger.online
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-08-05 · Porkbun LLC
- Addresses
- 104.21.47.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.147.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:93a22606:4700:3036::6815:2f7a
- Cloudflare
- Cloudflare (104.21.47.122, 172.67.147.162): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- my-ledgerlive.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerlive”Cloudflare
DetailsHide details for my-ledgerlive.org
- Domain
- my-ledgerlive.org
- Match
- A registered domain containing “ledgerlive”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-08-03 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 104.21.81.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.163.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:a3632606:4700:3036::6815:51ba
- Cloudflare
- Cloudflare (104.21.81.186, 172.67.163.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- securitylogin-ledger.org DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Contains “ledger”Parking page · ParkingCrew (Team Internet)
DetailsHide details for securitylogin-ledger.org
- Domain
- securitylogin-ledger.org
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-08-03 · Dynadot Inc
- Addresses
- 185.53.179.128 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.128): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-com-us.appContains “ledger”No address or mail server yet
DetailsHide details for ledger-com-us.app
- Domain
- ledger-com-us.app
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-07-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-software.click US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for ledger-software.click
- Domain
- ledger-software.click
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .click zone file copy it was found in
- Registered
- 2026-07-29 · Name.com, Inc.
- Addresses
- 104.21.31.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.174.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:1f1b2606:4700:3036::ac43:aeae
- Cloudflare
- Cloudflare (104.21.31.27, 172.67.174.174): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- my-ledger.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “ledger”Amazon Web Services
DetailsHide details for my-ledger.xyz
- Domain
- my-ledger.xyz
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-07-24 · Name.com, Inc.
- Addresses
- 216.150.16.129 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.150.16.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.150.16.129, 216.150.16.193): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-app.liveContains “ledger”PhishDestroy CommunitySuspicious · medium
DetailsHide details for ledger-app.live
- Domain
- ledger-app.live
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-07-22 · Dynadot Inc
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-live.help US · AS16509 · Amazon.com, Inc.2 addressesContains “ledger-live”Amazon Web Services
DetailsHide details for ledger-live.help
- Domain
- ledger-live.help
- Match
- A registered domain containing “ledger-live”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .help zone file copy it was found in
- Registered
- 2026-07-22 · Fewmoretaps OU d/b/a Trustname.com
- Addresses
- 216.150.1.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.150.16.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.150.1.1, 216.150.16.1): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-com-lives.appContains “ledger”No address or mail server yet
DetailsHide details for ledger-com-lives.app
- Domain
- ledger-com-lives.app
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-07-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-supports.infoContains “ledger”MX present
DetailsHide details for ledger-supports.info
- Domain
- ledger-supports.info
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-07-08 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- mx1.titan.emailmx2.titan.emailus2.mx1.mailhostbox.comus2.mx2.mailhostbox.comus2.mx3.mailhostbox.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- shop-ledger.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesContains “ledger”Hostinger CDNMX present
DetailsHide details for shop-ledger.online
- Domain
- shop-ledger.online
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-07-08 · HOSTINGER operations, UAB
- Addresses
- 195.35.60.10 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)212.1.212.208 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)2a02:4780:1e:cccb:61ce:29ed:718d:3d72a02:4780:22:16aa:5ed2:8dac:816a:a019
- Hostinger CDN
- Hostinger CDN (195.35.60.10, 212.1.212.208): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlive.icuContains “ledgerlive”No address or mail server yet
DetailsHide details for ledgerlive.icu
- Domain
- ledgerlive.icu
- Match
- A registered domain containing “ledgerlive”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .icu zone file copy it was found in
- Registered
- 2026-07-07 · Fewmoretaps OU d/b/a Trustname.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- api-ledger.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for api-ledger.org
- Domain
- api-ledger.org
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-07-05 · Key-Systems GmbH
- Addresses
- 104.21.41.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.191.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:bfba2606:4700:3036::6815:29a7
- Cloudflare
- Cloudflare (104.21.41.167, 172.67.191.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlive.support US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerlive”Cloudflare
DetailsHide details for ledgerlive.support
- Domain
- ledgerlive.support
- Match
- A registered domain containing “ledgerlive”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .support zone file copy it was found in
- Registered
- 2026-06-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.63.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.145.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:91732606:4700:3032::6815:3f74
- Cloudflare
- Cloudflare (104.21.63.116, 172.67.145.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-firmware.help DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Contains “ledger”PhishDestroy CommunitySuspicious · mediumParking page · ParkingCrew (Team Internet)
DetailsHide details for ledger-firmware.help
- Domain
- ledger-firmware.help
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .help zone file copy it was found in
- Registered
- 2026-06-27 · Dynadot Inc
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 185.53.179.128 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.128): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sync-ledger.live RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “ledger”
DetailsHide details for sync-ledger.live
- Domain
- sync-ledger.live
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-06-20 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Addresses
- 193.233.198.135 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlive.store US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerlive”Cloudflare
DetailsHide details for ledgerlive.store
- Domain
- ledgerlive.store
- Match
- A registered domain containing “ledgerlive”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .store zone file copy it was found in
- Registered
- 2026-06-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Addresses
- 104.21.8.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:88a2606:4700:3033::ac43:8b83
- Cloudflare
- Cloudflare (104.21.8.138, 172.67.139.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- connect-ledger.online DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Contains “ledger”Parking page · ParkingCrew (Team Internet)
DetailsHide details for connect-ledger.online
- Domain
- connect-ledger.online
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-06-17 · EuroDNS S.A.
- Addresses
- 185.53.179.145 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.145): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-ledger-com.org FR · AS16276 · OVH OVH SASContains “ledger”Parking page · emailverification.info suspended-domain page
DetailsHide details for app-ledger-com.org
- Domain
- app-ledger-com.org
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-06-13 · Key-Systems GmbH
- Addresses
- 94.23.162.163 · France · AS16276 OVH OVH SAS · emailverification.info suspended-domain page (parking page)
- Parking page · emailverification.info suspended-domain page
- The registry delegates app-ledger-com.org to emailverification.info suspended-domain page’s nameservers, which answer for it. emailverification.info suspended-domain page (94.23.162.163): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-com.org FR · AS16276 · OVH OVH SASContains “ledger”Parking page · emailverification.info suspended-domain page
DetailsHide details for ledger-com.org
- Domain
- ledger-com.org
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-06-13 · Key-Systems GmbH
- Addresses
- 54.38.220.85 · France · AS16276 OVH OVH SAS · emailverification.info suspended-domain page (parking page)
- Parking page · emailverification.info suspended-domain page
- The registry delegates ledger-com.org to emailverification.info suspended-domain page’s nameservers, which answer for it. emailverification.info suspended-domain page (54.38.220.85): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-live.store US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger-live”CloudflareMX present
DetailsHide details for ledger-live.store
- Domain
- ledger-live.store
- Match
- A registered domain containing “ledger-live”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .store zone file copy it was found in
- Registered
- 2026-06-07 · Name.com, Inc.
- Addresses
- 104.21.76.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.196.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:4c982606:4700:3033::ac43:c443
- Cloudflare
- Cloudflare (104.21.76.152, 172.67.196.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-restore.shopContains “ledger”No address or mail server yet
DetailsHide details for ledger-restore.shop
- Domain
- ledger-restore.shop
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-06-07 · Registrar.eu
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- card-ledger.shop US · AS13335 · Cloudflare, Inc.Contains “ledger”Cloudflare
DetailsHide details for card-ledger.shop
- Domain
- card-ledger.shop
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-06-04 · Name.com, Inc.
- Addresses
- 185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlivepro.online US · AS13335 · Cloudflare, Inc.4 addressesContains “ledgerlive”CloudflareMX present
DetailsHide details for ledgerlivepro.online
- Domain
- ledgerlivepro.online
- Match
- A registered domain containing “ledgerlive”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-06-04 · IONOS SE
- Addresses
- 104.21.66.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.155.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:42252606:4700:3034::ac43:9bda
- Cloudflare
- Cloudflare (104.21.66.37, 172.67.155.218): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx00.ionos.commx01.ionos.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlivepro.org DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “ledgerlive”IONOSMX present
DetailsHide details for ledgerlivepro.org
- Domain
- ledgerlivepro.org
- Match
- A registered domain containing “ledgerlive”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-06-04 · IONOS SE
- Addresses
- 74.208.236.72 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2607:f1c0:100f:f000::200
- IONOS
- IONOS (74.208.236.72): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.commx01.ionos.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlivepro.store DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “ledgerlive”IONOSMX present
DetailsHide details for ledgerlivepro.store
- Domain
- ledgerlivepro.store
- Match
- A registered domain containing “ledgerlive”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .store zone file copy it was found in
- Registered
- 2026-06-04 · IONOS SE
- Addresses
- 74.208.236.123 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2607:f1c0:100f:f000::200
- IONOS
- IONOS (74.208.236.123): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.commx01.ionos.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-supptech.liveContains “ledger”MX present
DetailsHide details for ledger-supptech.live
- Domain
- ledger-supptech.live
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-05-27 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- secure-ledger.liveContains “ledger”No address or mail server yet
DetailsHide details for secure-ledger.live
- Domain
- secure-ledger.live
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-05-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- www-ledger-com.org US · AS13335 · Cloudflare, Inc.2 addressesContains “ledger”Cloudflare
DetailsHide details for www-ledger-com.org
- Domain
- www-ledger-com.org
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-05-22 · Web Commerce Communications Limited dba WebNic.cc
- Addresses
- 104.21.95.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.169.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.95.28, 172.67.169.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- diagnose-ledger.liveContains “ledger”No address or mail server yet
DetailsHide details for diagnose-ledger.live
- Domain
- diagnose-ledger.live
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-05-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-live.siteContains “ledger-live”No address or mail server yet
DetailsHide details for ledger-live.site
- Domain
- ledger-live.site
- Match
- A registered domain containing “ledger-live”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-05-11 · Gname.com Pte. Ltd.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-insurance-support.org US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for ledger-insurance-support.org
- Domain
- ledger-insurance-support.org
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-05-08 · CNOBIN INFORMATION TECHNOLOGY LIMITED
- Addresses
- 104.21.12.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.132.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:caf2606:4700:3036::ac43:8433
- Cloudflare
- Cloudflare (104.21.12.175, 172.67.132.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger247.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”CloudflareMX present
DetailsHide details for ledger247.app
- Domain
- ledger247.app
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-05-01 · CloudFlare, Inc.
- Addresses
- 104.21.30.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.150.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:96352606:4700:3036::6815:1e11
- Cloudflare
- Cloudflare (104.21.30.17, 172.67.150.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledgerlive.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “ledgerlive”Parking page · Afternic
DetailsHide details for ledgerlive.xyz
- Domain
- ledgerlive.xyz
- Match
- A registered domain containing “ledgerlive”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-05-01 · Dominet (HK) Limited
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ledgerlive.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-diagnostics.support US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for ledger-diagnostics.support
- Domain
- ledger-diagnostics.support
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .support zone file copy it was found in
- Registered
- 2026-04-24 · OwnRegistrar, Inc.
- Addresses
- 104.21.3.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.130.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:82bd2606:4700:3036::6815:387
- Cloudflare
- Cloudflare (104.21.3.135, 172.67.130.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-scan.appContains “ledger”No address or mail server yet
DetailsHide details for ledger-scan.app
- Domain
- ledger-scan.app
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-04-22 · NameSilo, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-support.onlineContains “ledger”MX present
DetailsHide details for ledger-support.online
- Domain
- ledger-support.online
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-04-18 · Web Commerce Communications Limited dba WebNic.cc
- MX
- route1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-supp.infoContains “ledger”MX present
DetailsHide details for ledger-supp.info
- Domain
- ledger-supp.info
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-04-15 · Web Commerce Communications Limited dba WebNic.cc
- MX
- route1.mx.cloudflare.netroute3.mx.cloudflare.netroute2.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- ledger-wallet.run US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger-wallet”PhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for ledger-wallet.run
- Domain
- ledger-wallet.run
- Match
- A domain containing “ledger-wallet”, one of the names we match for Ledger
- First found
- 2026-11-01 · the day we first found it in the .run zone file, already registered
- Registered
- 2026-04-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.15.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.160.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:a0fe2606:4700:3032::6815:f0c
- Cloudflare
- Cloudflare (104.21.15.12, 172.67.160.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- get-ledger.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ledger”Cloudflare
DetailsHide details for get-ledger.app
- Domain
- get-ledger.app
- Match
- A registered domain containing “ledger”, one of the names we match for Ledger
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-04-12 · CloudFlare, Inc.
- Addresses
- 104.21.43.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.186.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:2be82606:4700:3033::ac43:bae2
- Cloudflare
- Cloudflare (104.21.43.232, 172.67.186.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
