support-legar--help[.]webflow[.]io
“Ledgerยฎ Live: Desktop | Getting started with Ledger ๐๐ฎ๐ฉ๐ฉ๐จ๐ซ๐ญ”
Ringkasan bukti
This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Ledger cryptocurrency wallet users. Analysis indicates the infrastructure was designed to deceive victims into disclosing wallet credentials or installing malicious software under the guise of official Ledger support resources, a technique commonly associated with crypto drainer operations. Infrastructure analysis reveals the domain support-legar--help.webflow.io was registered through Webflow on April 28, 2026, with an anomalous future creation date suggesting potential domain spoofing or registry manipulation. The domain resolved to IP address 104.18.36.248, hosted on Cloudflare infrastructure in Canada, and presented a page titled 'Ledgerยฎ Live: Desktop | Getting started with Ledger ๐๐ฎ๐ฉ๐ฉ๐จ๐ซ๐ญ.' Security vendors on VirusTotal detected malicious activity, with 19 out of 95 engines flagging the domain. The SSL certificate was issued by Google Trust Services (WE1), and the domain appeared on one security blocklist, specifically PhishDestroy. The combination of brand impersonation, crypto-focused deception, and anomalous registration data elevates the risk profile. Organizations and individuals should implement targeted mitigation measures to counter this specific threat type. Immediately block the domain and IP address 104.18.36.248 at the network perimeter and endpoint levels. Ledger users should be alerted to verify all support communications through official channels only, particularly avoiding any domain containing 'webflow.io' or variations of 'ledger' with misspellings or additional characters. Monitor for similar impersonation patterns, such as domains registered through Webflow or other web hosting platforms that mimic cryptocurrency wallet providers. Security teams should review logs for connections to the flagged IP and domain, prioritizing investigations into any associated credential submissions or software downloads.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | support-legar--help.webflow.io |
malicious | Sinkholed |
| OpenDNS | support-legar--help.webflow.io |
phishing | Phishing Block |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau ยท snapshot tersimpan 11/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan ยท Buka pemindaian
Teknologi
3 teknologi dengan keyakinan tinggi teridentifikasi
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights โ mobile performance audit of support-legar--help.webflow.io ยท checked Apr 29, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan โ.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami โ lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive