en-lgor-live[.]pages[.]dev
“Ledger Live® | Secure Your Crypto Device®”
证据摘要
Analysis indicates that the domain en-lgor-live.pages.dev is currently active and hosts a page titled “Ledger Live® | Secure Your Crypto Device®”, directly referencing the Ledger brand. The site was registered on 2026-04-01 through Cloudflare, Inc., and resolves to the Cloudflare edge IP 172.66.44.115 located in Canada. DNS is served by johnny.ns.cloudflare.com and kim.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 root, and uses HSTS, HTTP/3, and Cloudflare infrastructure. VirusTotal records show that 1 of 94 scanning engines flagged the domain, and it appears on at least one public blocklist, with PhishDestroy already blocking it. The observed indicators suggest a high-risk brand-impersonation campaign targeting Ledger users. No additional forensic artifacts such as page content, scripts, or redirects have been disclosed, leaving the exact credential-harvesting mechanism unconfirmed. Defenders should add en-lgor-live.pages.dev to URL filtering and endpoint protection rules, monitor for related DNS queries, and block traffic to its IP address. Continuous re-evaluation is advised in case the infrastructure changes or further detections emerge.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of en-lgor-live.pages.dev · checked Apr 1, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控