MALICIOUS — HIGH
Verifica phishing e sicurezza per get-ledgrlive-app.pages.dev
get-ledgrlive-app[.]
PhishDestroy identifies the domain get-ledgrlive-app.pages.dev as an active Ledger hardware wallet impersonation campaign, currently leveraging brand deception to distribute malicious payloads or harvest credentials.
- VirusTotal
- 2/94
- Blocklists
- No stored match
- Disponibilità
- Raggiungibile · accesso limitato · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
get-ledgrlive-app.pages.dev — Raggiungibile · accesso limitato (HTTP 403). Simulazione del marchio: Ledger; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 2/94 (Kaspersky, LevelBlue); URLScan malicious verdict; PhishDestroy score 61/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
PhishDestroy identifies the domain get-ledgrlive-app.pages.dev as an active Ledger hardware wallet impersonation campaign, currently leveraging brand deception to distribute malicious payloads or harvest credentials. This domain, registered under Cloudflare Inc., masquerades as an official Ledger service to exploit user trust in cryptocurrency security solutions. The threat is classified as elevated due to the immediate risk of financial compromise for cryptocurrency users who may inadvertently engage with this fraudulent interface. This domain was flagged by 1 of 95 VirusTotal security vendors, indicating low but notable detection coverage. It resolves to IP address 188.114.97.3 and operates under a Google Trust Services SSL certificate, which may lend an air of legitimacy to unsuspecting victims. The domain is hosted on Cloudflare Pages, a platform often abused by threat actors for rapid deployment and evasion of takedown efforts. While the exact registration date remains unverified in public records, the presence of this domain in threat intelligence feeds suggests recent activation. Current blocklist counts and historical reputation scores remain undisclosed in open sources, but the combination of low VirusTotal detection and Cloudflare hosting warrants immediate scrutiny. Users are strongly advised to avoid interacting with get-ledgrlive-app.pages.dev or any domains resembling official Ledger services not hosted on ledger.com. Block the IP address 188.114.97.3 at the network perimeter and consider DNS sinkholing for associated domains. Ledger customers should verify any communications via official channels and enable hardware wallet transaction verification to prevent unauthorized fund transfers. Security teams are recommended to ingest this IOC into SIEM systems and conduct retrospective analysis for any internal DNS resolutions to this domain. Immediate takedown requests should be submitted to Cloudflare and Google Trust Services to mitigate ongoing exposure.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Informazioni forensi
Tecnologie · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of get-ledgrlive-app.pages.dev · checked Mar 25, 2026
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.