led-net1-9cjf[.]vercel[.]app
“Ledger® Live Login® (en-US) | Ledger Support”
led-net1-9cjf.vercel.app — Konten tidak tersedia. Peniruan identitas merek: Ledger; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 20/95 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Certego); URLScan malicious verdict; PhishDestroy score 95/100. Registrar: Vercel.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain is flagged for elevated-risk brand impersonation, specifically targeting Ledger, a cryptocurrency hardware wallet provider. The threat involves a fraudulent login page designed to harvest user credentials, likely for unauthorized access to Ledger Live accounts and associated cryptocurrency assets. Infrastructure analysis indicates the domain is constructed to closely resemble legitimate Ledger support pages, increasing the likelihood of successful deception. Analysis reveals the domain led-net1-9cjf.vercel.app is currently offline but was previously active on 2 security blocklists (PhishDestroy, PhishingDB). It resolves to IP 64.29.17.195, hosted on Amazon.com, Inc. (AS16509) infrastructure in the US. The domain is registered through Vercel Inc., and its SSL certificate is issued by Google Trust Services (WR1). VirusTotal detection shows 20 out of 95 security vendors flagging the domain as malicious. The page title, "Ledger® Live Login® (en-US) | Ledger Support," directly mimics official Ledger branding, reinforcing its deceptive intent. Mitigation steps for this threat type include immediate blacklisting of the domain and associated IP (64.29.17.195) across all network security controls. Organizations should deploy indicators of compromise (IOCs) such as the domain, IP, and SSL certificate issuer (Google Trust Services / WR1) into endpoint detection and response (EDR) systems. Users should be educated on verifying domain authenticity before entering credentials, particularly for cryptocurrency-related services. Additionally, monitoring for similar Vercel-registered domains with Ledger-themed page titles can help preempt future impersonation attempts.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 2 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive