MALICIOUS — CRITICAL
project-en--ledgrlive[.]pages[.]dev
10 of 91 security engines flagged the domain; the latest stored check returned HTTP 200.
- VirusTotal
- 10/91
- Blocklists
- No stored match
- التوفر
- آخر نشاط معروف · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
project-en--ledgrlive.pages.dev — آخر نشاط معروف (HTTP 200). انتحال العلامة التجارية: Ledger; نوع الاحتيال: Crypto Drainer. ملخص الأدلة: VirusTotal 10/91 (alphaMountain.ai, BitDefender, CyRadar, ESET, Fortinet); URLScan malicious verdict; PhishDestroy score 95/100. مسجّل النطاق: Cloudflare.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Digest
project-en--ledgrlive.pages.dev is classified critical with an evidence score of 95/100. 10 of 91 security engines flagged the domain. Registered 1 May 2026 via Cloudflare, Inc., hosted on 188.114.96.3 (Cloudflare, Inc., CA). The latest stored check on 9 Aug 2026 returned HTTP 200 and includes a capture.
Stored generated summary (templated)stored provider · 13/07/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
The domain project-en--ledgrlive.pages.dev was registered on May 01, 2026 through Cloudflare, Inc. It resolves to 188.114.96.3, an IP owned by Cloudflare, Inc. in Canada. The authoritative name servers are ignacio.ns.cloudflare.com and laura.ns.cloudflare.com. TLS termination is provided by Google Trust Services under the WE1 certificate, and the site enforces HSTS and supports HTTP/3, indicating a modern Cloudflare front‑end. The page title returned by the server is “project‑en‑ledgrlive — Building Trust, UX & Security” and the HTTP response code is 200. VirusTotal scans have flagged the domain in 6 of 91 security vendors, and it appears on a single public blocklist. PhishDestroy has already added the host to its blocklist. Independent scoring by Gridinsoft assigns a trust score of 0 / 100, reinforcing the high‑risk assessment. The infrastructure is classified as a “Crypto Drainer” scam, suggesting attempts to solicit cryptocurrency payments or private keys. No additional content analysis is available, so the exact phishing payload or credential‑capture mechanisms remain unknown. Defenders should block the domain at network perimeter, monitor DNS queries for the associated Cloudflare name servers, and consider adding the IP address 188.114.96.3 to threat‑intel feeds. Ongoing observation is advised because the site remains active and may evolve its delivery tactics.
نطاق تغطية البيانات12 recorded checks
استخبارات أمن الشبكات
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
التقنيات · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org ثقة 100٪Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com ثقة 100٪HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org ثقة 100٪تحليل VirusTotal
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of project-en--ledgrlive.pages.dev · checked May 1, 2026
الأدلة والتقارير الخارجيةIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.