ledger-login-bmr[.]pages[.]dev
“Suspected phishing site | Cloudflare”
ledger-login-bmr.pages.dev — Konten tidak tersedia. Peniruan identitas merek: Ledger; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 11/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLScan malicious verdict; Google Safe Browsing flagged; PhishDestroy score 83/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of ledger-login-bmr.pages.dev, observed on 24 July 2026, shows a high‑risk brand‑impersonation infrastructure targeting Ledger users. The domain was registered through Cloudflare, Inc. on 21 February 2026 and resolves to IP 172.66.44.87, which belongs to AS13335 Cloudflare, Inc. in the United States. The site presents a Cloudflare‑issued TLS certificate signed by Google Trust Services (WE1) and enforces HSTS while supporting HTTP/3. An HTTP request returns status 403 and the page title is “Suspected phishing site | Cloudflare”.
VirusTotal records indicate that 11 of 93 scanned security vendors flagged the domain as malicious, and the Gridinsoft trust score is 0 / 100. Google Safe Browsing lists the site under social‑engineering threats, and it appears on a single external blocklist, currently blocked by PhishDestroy. The nameservers ulla.ns.cloudflare.com and james.ns.cloudflare.com confirm the use of Cloudflare’s DNS service. The intelligence tags the campaign as a crypto‑scam that impersonates the Ledger brand.
No additional content analysis is available beyond the title, so the precise phishing payload remains unknown. Defenders should immediately block the domain and its resolving IP at perimeter and endpoint layers, add the domain to URL filtering rules, and monitor for any related sub‑domains that may be registered under the same nameservers. Continuous threat‑intel feeds should be consulted for new indicators, and any credential‑dumping activity targeting Ledger accounts should be investigated in light of this infrastructure.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of ledger-login-bmr.pages.dev · checked Apr 13, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive