en-us-ledger-live[.]pages[.]dev
“Suspected phishing site | Cloudflare”
en-us-ledger-live.pages.dev — Conteúdo indisponível. Representação da marca: Ledger; Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 10/93 (alphaMountain.ai, BitDefender, CyRadar, ESET, Fortinet); URLScan malicious verdict; PhishDestroy score 80/100. Registrador: Cloudflare.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of the domain en-us-ledger-live.pages.dev indicates it is a confirmed brand-impersonation scam targeting Ledger, a cryptocurrency hardware wallet provider. The domain was registered through Cloudflare, Inc. on September 2, 2020, and resolves to the IP address 188.114.97.3, which is part of AS13335 (Cloudflare, Inc.) located in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (adi.ns.cloudflare.com, karl.ns.cloudflare.com) and technologies such as HSTS and HTTP/3, which are consistent with modern web hosting but do not inherently indicate malicious intent. As of July 24, 2026, the domain has been flagged by 10 of 93 security vendors on VirusTotal, and it appears on at least one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, further supporting its classification as malicious.
The page title, 'Suspected phishing site | Cloudflare,' aligns with its current offline status, as the domain returns an HTTP 403 error, indicating access is forbidden. This suggests the domain may have been suspended or taken down by Cloudflare or the registrar following reports of fraudulent activity. The scam type is explicitly identified as a crypto scam, which correlates with the impersonation of Ledger, a known target for phishing campaigns aimed at stealing cryptocurrency credentials or private keys. The SSL certificate is issued by Google Trust Services (WE1), which is a legitimate certificate authority, but the presence of a valid SSL certificate does not mitigate the domain's malicious nature. No evidence of a specific phishing kit or additional infrastructure details (e.g., redirects, associated domains) is currently available in the provided intelligence.
Defenders should treat this domain as high-risk and ensure it is blocked at the network and endpoint levels.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of en-us-ledger-live.pages.dev · checked Apr 13, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo