ledger-live--desktop[.]pages[.]dev
“Suspected phishing site | Cloudflare”
ledger-live--desktop.pages.dev — Conteúdo indisponível. Representação da marca: Ledger; Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 12/95 (Criminal IP, alphaMountain.ai, BitDefender, CyRadar, Emsisoft); URLScan malicious verdict; CF Radar malicious; PhishDestroy score 91/100. Registrador: Cloudflare.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain, ledger-live--desktop.pages.dev, was flagged as a crypto scam impersonating Ledger, a hardware wallet provider. Registered on February 21, 2026, through Cloudflare, Inc., the domain resolves to IP 188.114.97.3 (AS13335, US) and is hosted on Cloudflare nameservers miles.ns.cloudflare.com and vita.ns.cloudflare.com. Analysis indicates the site was taken offline by July 23, 2026, returning an HTTP 403 status with a page title of 'Suspected phishing site | Cloudflare.' The SSL certificate is issued by Google Trust Services (WE1), and the domain employs HSTS and HTTP/3 technologies. Detection data shows the domain appeared on one security blocklist (PhishDestroy) and was flagged by 12 of 95 security vendors on VirusTotal.
Trust scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively, reinforcing its malicious classification. No evidence of a phishing kit or specific attack vector is present in the available data, but the domain’s structure and naming convention strongly suggest an intent to deceive users into believing it is an official Ledger Live desktop application. Defenders should treat this domain as confirmed malicious due to its blocklist presence, low trust scores, and vendor detections. The domain’s Cloudflare hosting and recent registration align with common phishing infrastructure patterns.
While the site is currently offline, historical DNS and WHOIS records should be preserved for forensic analysis. Network-level blocks at the IP and domain level are recommended, along with monitoring for related subdomains or re-registration attempts under similar naming schemes. No further content analysis is available, as the site was inaccessible at the time of review.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Inteligência forense
Tecnologias · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of ledger-live--desktop.pages.dev · checked Apr 13, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo