auth-ledger-live-wallet-en-us[.]pages[.]dev
“Ledger Live Wallet — Secure Crypto Management”
auth-ledger-live-wallet-en-us.pages.dev — Konten tidak tersedia. Peniruan identitas merek: Ledger; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 14/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLScan malicious verdict; PhishDestroy score 97/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain auth-ledger-live-wallet-en-us.pages.dev was registered on March 23 2026 through Cloudflare, Inc. The authoritative nameservers are kia.ns.cloudflare.com and wesley.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and CDN services. DNS resolution points to IP 172.66.47.178, an address owned by Cloudflare in Canada. The site presented an HTTPS endpoint secured by a Google Trust Services certificate (WE1) and advertised HSTS and HTTP/3 support. An HTTP request returned status code 403, and the site is currently taken offline, as confirmed by the PhishDestroy takedown and the fact that it appears on a single security blocklist.
VirusTotal analysis recorded 14 detections out of 94 scanned scanners, and Gridinsoft assigned a trust score of 0 / 100, while Scamadviser gave a score of 41 / 100, both indicating a high likelihood of malicious intent. The page title “Ledger Live Wallet — Secure Crypto Management” and the explicit “Impersonates: Ledger” field identify the campaign as a brand‑impersonation crypto scam targeting users of Ledger’s hardware wallet ecosystem. No further technical artefacts such as malicious payloads, credential‑harvesting forms, or redirection URLs have been disclosed, leaving the exact phishing workflow uncertain. Defenders should block the domain and its associated IP at perimeter and DNS layers, monitor for any DNS queries to the Cloudflare nameservers, and add the domain to internal threat intelligence feeds.
Since the certificate is issued by a trusted CA, TLS inspection may be required to detect any future re‑hosting of the content. Continuous re‑scanning on VirusTotal and similar services is advised to capture any changes in detection rates. Organizations using Ledger products should alert users to the existence of this impersonation attempt and advise against clicking links that reference “Ledger Live Wallet” from unsolicited communications.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Intelijen Forensik
Teknologi · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of auth-ledger-live-wallet-en-us.pages.dev · checked Mar 22, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive