CF雷达
provider verdict: malicious
报告“Suspected Phishing | Cloudflare”
access-en-ledger-desktop.pages.dev — 可达 · 访问受限 (HTTP 403). 品牌冒充:Ledger; 诈骗类型:Impersonation. 证据摘要: VirusTotal 0/89; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 75/100. 注册商: Cloudflare Pages.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
access-en-ledger-desktop.pages.dev returned HTTP status 403 on 2026-10-01, according to the recorded HTTP check. The same domain was first observed on 2026-08-10, and it appears on the phishdestroy internal listing.
The external blocklists MetaMask and SEAL both list this domain, with the blocklist check dated 2026-10-01. VirusTotal recorded 0 detections across 89 scanners on 2026-09-13. The SSL certificate was scanned on 2026-09-13 and its issuer was Google Trust Services / WE1.
The MetaMask and SEAL listings and the phishdestroy internal listing are dated 2026-10-01, while the VirusTotal scan and SSL scan are dated 2026-09-13. Because these observations come from different dates, a reader can compare them only as separate snapshots rather than as a single consistent picture. The 403 response on 2026-10-01 shows the server declined the request at that time, but it does not establish present availability.
Anyone reviewing access-en-ledger-desktop.pages.dev should retain the dated HTTP, blocklist, VirusTotal and SSL records together so later observations can be compared against them. During that review, avoid submitting passwords, wallet credentials or other sensitive information to the domain. Subsequent checks should be recorded with their own dates and source names so changes can be tracked accurately.
针对该主机的爬虫与浏览器观察记录,以及针对“Keitaro”式流量分配系统的实时指纹检测。
cloudflare扫描说明: cloudflare_ban: raw=cf_phishing_block; http=403; via=https_proxy; server=cloudflare; provider_error=cloudflare_phishing_interstitial
扫描期间服务提供商的响应: cloudflare_phishing_interstitial
Edge-IP 声誉不属于此域。
Location describes the IP network.
91e79d1f184d4835f6323c30e5db404b412fc204ef2e1a5b1f119ee106d54c34Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
8 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
已存储 151 个仿冒域名
显示 151 个中的 100 个
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent