6eeb1fc6[.]trezo-d82[.]pages[.]dev
“Ledger Live”
Pengamatan tersimpan
Perbedaan judul yang diamati
Ringkasan bukti
On July 23 2026 analysts observed that the domain 6eeb1fc6.trezo-d82.pages.dev is currently offline, returning HTTP 403 for all requests. The site is listed on a single security blocklist, where it is flagged by PhishDestroy as a Ledger impersonation. The page title reported by passive monitoring is “Ledger Live”, and the domain is explicitly associated with a crypto‑scam campaign targeting Ledger users. Infrastructure data show the domain is hosted behind Cloudflare, Inc., using the authoritative nameservers adi.ns.cloudflare.com and karl.ns.cloudflare.com. DNS resolution points to IP 172.66.44.213, an address owned by AS13335 Cloudflare, Inc., located in the United States.
The TLS certificate is issued by Google Trust Services under the WE1 profile, confirming a valid HTTPS endpoint despite the malicious intent. The domain was registered on September 2 2020 through Cloudflare’s registrar service. Automated scanning on VirusTotal recorded 13 detections out of 95 antivirus engines, indicating a moderate level of consensus among security vendors that the site is malicious. Additional telemetry reports a Gridinsoft trust score of 0 / 100, and the presence of security‑focused headers such as HTTP Strict Transport Security (HSTS) and support for HTTP/3, both typical of Cloudflare‑protected sites. The observed scam type is classified as a “Crypto Scam”, aligning with the Ledger brand impersonation.
Because the site is offline, direct content analysis is unavailable; the exact phishing page layout, credential capture mechanisms, or redirect behavior remain unverified. Defenders should continue to block the domain at network perimeter and DNS layers, add it to local blocklists, and monitor for any re‑activation attempts. Given the Cloudflare‑mediated hosting, threat actors may recreate the site using the same infrastructure, so periodic re‑resolution of the domain and re‑scanning with multi‑engine services are recommended.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 13/08/2026
Linimasa deteksi
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Intelijen Forensik
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of 6eeb1fc6.trezo-d82.pages.dev · checked Mar 24, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive