ledger-support.li — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Ledger; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 13/95 (alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker); URLQuery 100 det.; URLScan malicious verdict; Spamhaus DBL_PHISH; 3 external blocklist matches (Polkadot, Enkrypt, Codeesura); PhishDestroy score 95/100. Registrar: GOOGL-2 (ASN: 396982).
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Facts
PhishDestroy first observed ledger-support.li on Nov 11, 2025. The hostname explicitly references Ledger and uses “support,” a pattern consistent with a support lure; stored content metadata identifies the same apparent target. The captured page title is “Ledger Diagnostics - Secure Hardware Wallet Support Tool”. Evidence score: 95/100 (critical).
7 independent sources recorded positive findings: VirusTotal, Polkadot, Enkrypt, Codeesura, Spamhaus DBL, and URLQuery, and others. VirusTotal recorded 13 detections among 95 engines: alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Kaspersky on Feb 23, 2026 at 06:38 UTC. Polkadot, Enkrypt, and Codeesura listed the hostname in the separate external-blocklist snapshot on Aug 9, 2026 at 10:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 14, 2026 at 18:33 UTC. URLQuery recorded 100 detections; no observation timestamp was retained.
HTTP 502 was recorded on Aug 9, 2026 at 01:19 UTC; content was unavailable. Registration records for the domain list GOOGL-2 (ASN: 396982) as the registrar. At collection time, the hostname resolved to 34.111.179.208 on AS396982 (GOOGLE-CLOUD-PLATFORM, US). The evidence archive retains 2 visual captures from PhishDestroy and URLScan.
Copertura dei dati12 recorded checks
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Informazioni forensi
Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.