ledger-com-start-in[.]pages[.]dev
“Suspected phishing site | Cloudflare”
Pengamatan tersimpan
Perbedaan judul yang diamati
Ringkasan bukti
The domain ledger-com-start-in.pages.dev was observed delivering an HTTP 403 response and is currently listed as taken offline. DNS resolution points to 172.66.46.212, which belongs to Cloudflare’s network (AS13335, United States). The authoritative nameservers are owen.ns.cloudflare.com and susan.ns.cloudflare.com, indicating the domain is registered through Cloudflare, Inc. The TLS certificate is issued by Google Trust Services under the WE1 root, confirming the presence of HTTPS. HTTP headers include Strict‑Transport‑Security and the site supports HTTP/3, both typical of Cloudflare‑enabled services. Reputation services rate the domain poorly: Scamadviser assigns a trust score of 41 / 100, Gridinsoft scores 0 / 100, and the domain appears on a single security blocklist.
PhishDestroy has actively blocked it. VirusTotal analysis shows that 10 of 95 scanning engines flagged the domain as malicious, reinforcing the suspicion of abuse. The page title returned by the server is “Suspected phishing site | Cloudflare”, which aligns with the classification of a crypto‑related scam. The intelligence explicitly states the site impersonates the Ledger brand and is categorized as a crypto scam. The creation date of the domain is 21 February 2026, less than five months before the report date, suggesting a short‑lived campaign.
Because the site is already offline, immediate traffic mitigation is not required, but the IP address 172.66.46.212 remains part of Cloudflare’s shared infrastructure and may host other malicious assets. Defenders should add the domain to internal blocklists, monitor for any resurrection or reuse of the same sub‑domain pattern, and consider extending detection rules to flag any future pages.dev sub‑domains that reference Ledger or exhibit similar TLS and HTTP characteristics. Continuous monitoring of Cloudflare‑hosted domains and periodic re‑scans with VirusTotal or similar engines are advisable to capture potential re‑activations.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Intelijen Forensik
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of ledger-com-start-in.pages.dev · checked Apr 13, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive