qjhgfs[.]d7jyu2dnjykvx[.]amplifyapp[.]com
“Ledger Live”
qjhgfs.d7jyu2dnjykvx.amplifyapp.com — 콘텐츠를 사용할 수 없음 (HTTP 502). 브랜드 사칭: Ledger; 사기 유형: Crypto Scam. 증거 요약: VirusTotal 11/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); PhishDestroy score 83/100.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This report details a malicious domain, qjhgfs.d7jyu2dnjykvx.amplifyapp.com, which was identified as a cryptocurrency scam. The site presented itself as "Ledger Live," thereby impersonating the legitimate Ledger brand to deceive users. The primary threat posed by this domain was credential theft or the fraudulent collection of cryptocurrency wallet recovery phrases, targeting users of the Ledger hardware wallet service.
Technical analysis reveals that the domain was flagged by 11 out of 95 VirusTotal vendors for malicious activity. It was created on 2026-02-21 and hosted on IP address 108.138.7.103, which is located in Germany (DE) and belongs to AS16509 Amazon.com, Inc. The site utilized an R12 SSL certificate. It was listed on one blocklist and flagged by security vendors including ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. The GridinSoft trust rating was 0 out of 100.
As of the latest check, the domain is offline and no longer accessible. The DOM risk score is 73 out of 100, indicating a high risk. Given its status as a confirmed cryptocurrency phishing site impersonating a known brand, the overall risk level for users who may have interacted with it remains elevated.
위협 대응 Pipeline
공개 차단 목록 상태
포렌식 인텔리전스
VirusTotal 분석
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.