faq-live-ladger[.]pages[.]dev
“Ledger Live Desktop® | Secure Crypto Management Platform®”
Osservazione memorizzata
Contrasto dei titoli osservato
Riepilogo delle prove
Analysis of the domain faq-live-ladger.pages.dev indicates a crypto scam campaign impersonating Ledger, a cryptocurrency hardware wallet provider. The domain was registered on March 23, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.47.109, which is geolocated to Canada and associated with Cloudflare's infrastructure. The nameservers evan.ns.cloudflare.com and liz.ns.cloudflare.com further confirm Cloudflare as the hosting and DNS provider. At the time of assessment, the domain returned an HTTP 403 status, suggesting access restrictions or takedown measures, and is currently offline. The page title, 'Ledger Live Desktop® | Secure Crypto Management Platform®,' directly mimics Ledger’s official branding, aligning with the reported scam type of a crypto scam.
Detection data from security vendors indicates elevated risk: 11 of 94 engines on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as high-risk. The domain is also blocked by PhishDestroy, a specialized anti-phishing service. Infrastructure analysis reveals the use of Cloudflare’s content delivery network, including HTTP/3 and HSTS, which are legitimate technologies but frequently leveraged by threat actors to obscure malicious activity. The SSL certificate is issued by Google Trust Services (WE1), a common certificate authority that does not inherently indicate malicious intent but is often exploited in phishing campaigns due to its widespread trust.
While the domain is currently offline, defenders should treat it as part of an active brand impersonation campaign targeting Ledger users. Organizations are advised to block the domain and its resolving IP (172.66.47.109) at the network level, monitor for related subdomains or newly registered lookalike domains, and alert users to the risk of crypto-themed phishing.
Data Coverage
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
VirusTotal
0 → 2
Informazioni forensi
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of faq-live-ladger.pages.dev · checked Mar 22, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo