ledger-live-login-dcc[.]pages[.]dev
“Suspected phishing site | Cloudflare”
Ringkasan bukti
Analysis of ledger-live-login-dcc.pages.dev, created on February 21, 2026, indicates a confirmed brand impersonation campaign targeting Ledger users. The site was hosted behind Cloudflare infrastructure (AS13335) and resolved to IP address 188.114.97.3 in the United States. The domain employed Cloudflare DNS with nameservers miles.ns.cloudflare.com and vita.ns.cloudflare.com, and presented a Google Trust Services / WE1 TLS certificate, confirming legitimate certificate issuance but not legitimizing the content. An HTTP request returned status code 403 and the page title "Suspected phishing site | Cloudflare," suggesting the site was flagged by Cloudflare's anti‑phishing mechanisms before being taken offline.
VirusTotal scans recorded detections by six of ninety‑three security vendors, and the domain appears on one public blocklist. Independent security services assigned a Gridinsoft trust score of 0 out of 100, reflecting extreme risk. The site was classified as a crypto‑related scam, explicitly impersonating Ledger, and was blocked by PhishDestroy. Detected technologies include HTTP/3, HSTS, and Cloudflare's edge services.
While the exact phishing payload or credential‑harvesting page has not been captured, the combination of brand impersonation, malicious detection history, and low trust score warrants immediate defensive action. Organizations should add the domain and its resolved IP to blocklists, update IDS/IPS signatures to detect similar Ledger‑related subdomains, and monitor Cloudflare‑registered domains for future variants. Continuous observation of Cloudflare‑hosted registrants and rapid response to any re‑registration attempts are recommended to mitigate recurrence.
Data Coverage
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 13/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Intelijen Forensik
Teknologi
3 teknologi dengan keyakinan tinggi teridentifikasi
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of ledger-live-login-dcc.pages.dev · checked Apr 14, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive