MALICIOUS — CRITICAL
app-ledger-com-live[.]pages[.]dev
The domain app-ledger-com-live.pages.dev was registered on February 21, 2026 and is currently hosted on Cloudflare’s network (AS13335) with the IP address 172.66.45.8 located in the United States.
- VirusTotal
- 9/93
- Blocklists
- No stored match
- Доступность
- Доступен · доступ ограничен · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
app-ledger-com-live.pages.dev — Доступен · доступ ограничен (HTTP 403). Олицетворение бренда: Ledger; Тип мошенничества: Crypto Scam. Сводка доказательств: VirusTotal 9/93 (Criminal IP, alphaMountain.ai, CyRadar, Fortinet, Google Safebrowsing); URLScan malicious verdict; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 85/100. Регистратор: Cloudflare.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
Evidence Analysis
The domain app-ledger-com-live.pages.dev was registered on February 21, 2026 and is currently hosted on Cloudflare’s network (AS13335) with the IP address 172.66.45.8 located in the United States. The site presents a Cloudflare‑generated page titled "Suspected phishing site | Cloudflare" and returns an HTTP 403 status, indicating that the content is deliberately blocked. The SSL certificate presented is issued by Google Trust Services under the WE1 authority, a typical certificate for Cloudflare‑proxied sites, and does not provide any indication of malicious self‑signed keys. Reputation services assign extremely low trust scores: Scamadviser rates the domain 1 / 100 and Gridinsoft 0 / 100, reflecting a high likelihood of abuse.
Google Safe Browsing flags the domain for social engineering, and PhishDestroy has already placed it on its blocklist. VirusTotal analysis shows that 9 of 93 scanning engines flag the domain, reinforcing the suspicion of malicious activity. The domain is explicitly noted to impersonate the Ledger brand and is classified as a crypto‑related scam.
No additional content or page details are available beyond the generic Cloudflare warning page, and the site’s current offline status suggests that the hosting provider has taken remediation steps. Defenders should immediately block the domain and its associated IP address, monitor for other newly created *.pages.dev subdomains that target Ledger or cryptocurrency users, and enforce URL filtering based on the observed indicators. Continuous observation of Cloudflare‑hosted domains with similar creation dates and low reputation scores is recommended to pre‑empt further impersonation attempts.
Охват данных13 recorded checks
Данные сетевой безопасности
Процесс реагирования на угрозы
Статус в публичных блок-листах
Криминалистическая аналитика
Технологии · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% уверенностиCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% уверенностиHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% уверенностиАнализ VirusTotal
Анализ производительности сайта
Google PageSpeed Insights — mobile performance audit of app-ledger-com-live.pages.dev · checked Apr 13, 2026
Доказательства и внешние отчетыIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.