VirusTotal
17 / 89
“Suspected Phishing | Cloudflare”
live-ledgers-uss.pages.dev — Raggiungibile · accesso limitato (HTTP 403). Simulazione del marchio: Ledger; Tipo di truffa: Impersonation. Riepilogo delle prove: VirusTotal 17/89 (alphaMountain.ai, BitDefender, CyRadar, ESET, Emsisoft); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 100/100. Registrar: Cloudflare Pages.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
live-ledgers-uss.pages.dev returned HTTP status 403 in an HTTP check recorded on 2026-10-01, according to the evidence set. The same record lists the host's IP address as 172.66.47.69, located in CA and assigned to Cloudflare, Inc.
The domain was first observed on 2026-09-08. A VirusTotal scan checked on 2026-09-18 reported 17 detections across 89 scanners. External blocklists MetaMask and SEAL were recorded on 2026-10-01, the same date as the HTTP check, and the domain appears on the phishdestroy internal listing. A PageSpeed check on 2026-09-16 returned a performance score of 100, and an SSL scan on the same date identified the issuer as Google Trust Services / WE1.
The HTTP 403 response describes only the single request captured on its recorded date, not all content the host may serve. The VirusTotal detection count and scanner total reflect one scan on its own date, and the external blocklist entries reflect listings recorded on a separate date; these sources measure different things and should not be merged into a single verdict. The chronology from first observation to the later checks is short, and the shared calendar dates among some records do not establish simultaneous measurement.
For live-ledgers-uss.pages.dev, preserve the HTTP check record, the VirusTotal scan record, and the external blocklist entries as separate source documents. Compare the HTTP response record against the blocklist entries in a later review, and compare the VirusTotal scan against the PageSpeed and SSL scan records separately. Retain the phishdestroy internal listing entry alongside the external blocklist records for reference.
Osservazioni archiviate relative al confronto tra crawler e browser per questo host, oltre a una verifica in tempo reale delle impronte digitali per i sistemi di distribuzione del traffico in stile Keitaro.
cloudflareNota dello scanner: cloudflare_ban: raw=cf_phishing_block; http=403; via=https_proxy; server=cloudflare; provider_error=cloudflare_phishing_interstitial
Risposta del provider durante la scansione: cloudflare_phishing_interstitial
La reputazione Edge-IP non è attribuita a questo dominio.
Location describes the IP network.
24a7427596e58f8bb07f877d72ca9a85f5be883024f7d1c65fb4beaf7e7587feSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of live-ledgers-uss.pages.dev · checked Sep 16, 2026
12 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
151 domini simili memorizzati
Visualizzati 100 di 151
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Template-based draft · optional AI wording assistance requires separate consent
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaSegnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraControlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo