lebger.cfd
Appeared in the .cfd zone on Thursday, September 3, 2026; by the end of that day the census found active website about saas & tech. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
lebger.cfd is a typosquat of ledger.com and serves an exposed phishing-kit control panel ('Control Center — Lebger') with campaigns named 'Ledger test'/'Test Ledger', target/send/open counters and a 'Recent Captures' table whose column is 'Phrase' — i.e. harvested Ledger recovery seed phrases.
The domain lebger.cfd hosts a phishing campaign management dashboard ('Control Center — Lebger') with active infrastructure for sending phishing emails, tracking targets, captures, and opens. The page displays campaigns named 'Ledger test' and 'Test Ledger' with 4 captured credentials logged; this is a typosquat on Ledger (a cryptocurrency wallet brand) used as an operational phishing platform, not a phishing page impersonating Ledger itself, making it abuse rather than phishing.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, September 3, 2026
Same data as JSON: /api/zone/domain/lebger.cfd. This page is not indexed by search engines and does not link to the site it describes.