ledger-login-helpweb[.]pages[.]dev
Pemeriksaan phishing dan keamanan ledger-login-helpweb.pages.dev
“Suspected phishing site | Cloudflare”
ledger-login-helpweb.pages.dev — Dapat dijangkau · akses dibatasi (HTTP 403). Peniruan identitas merek: Ledger; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 14/93 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CyRadar); URLScan malicious verdict; CF Radar malicious; PhishDestroy score 92/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of ledger-login-helpweb.pages.dev indicates a cryptocurrency phishing domain impersonating Ledger, a hardware wallet provider. The domain, registered on February 21, 2026, through Cloudflare, Inc., currently resolves to 172.66.47.90 (AS13335, US) and is hosted on Cloudflare Pages infrastructure. As of July 25, 2026, the domain returns an HTTP 403 status with a page title 'Suspected phishing site | Cloudflare,' suggesting it has been flagged by the hosting provider or security systems. Detection metrics show 14 of 93 security vendors on VirusTotal flagged the domain, and it appears on at least one security blocklist.
Gridinsoft assigns a trust score of 0/100, reinforcing its classification as malicious. Infrastructure analysis reveals the use of Cloudflare nameservers (lee.ns.cloudflare.com, walk.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). Technologies detected include HSTS and HTTP/3, typical of Cloudflare-hosted sites. The domain was blocked by PhishDestroy and is currently offline, though historical activity suggests it targeted users seeking Ledger login or support pages.
The exact content of the phishing page is not confirmed, but the scam type is classified as a crypto scam based on available intelligence. Defenders should treat this domain as high-risk for Ledger brand impersonation. Recommended actions include blocking the domain and IP at network and endpoint levels, monitoring for related subdomains or newly registered lookalike domains, and alerting users to potential crypto wallet credential theft attempts. If the domain reactivates, further analysis of its payload and redirection chains is advised.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Intelijen Forensik
Teknologi · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of ledger-login-helpweb.pages.dev · checked Apr 22, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive