URLQuery
3 det.
ledgeer-live-start.netlify.app:凭据钓鱼,PhishDestroy 于 2026-10-25 检测到。风险:高(68/100)。注册商:Netlify。状态:最后已知的活跃状态。托管:Amazon.com, Inc。请勿输入登录凭据,也不要连接钱包。
“Ledger® Live Login® (en-US) | Ledger Support”
凭据钓鱼: ledgeer-live-start.netlify.app — 最后已知的活跃状态 (HTTP 200). 证据摘要: URLQuery 3 det.; URLScan malicious verdict; PhishDestroy score 68/100. 注册商: Netlify.
下面的证据摘要使用了保留的观测数据。每个数据源都保留了自己的采集日期。
3 det.
恶意
打开报告观测时间: · 检索到:
| Uuid | 01a170d1-fd27-77fd-a9fd-dd50f9d5d42e |
|---|---|
| Final url | https://ledgeer-live-start.netlify.app/ |
| 状态 | 200 |
| 已重定向 | https-only |
| 重定向 | [
{
"to": "https://ledgeer-live-start.netlify.app/",
"from": "http://ledgeer-live-start.netlify.app/",
"status": 307
}
] |
| Ip | 35.157.26.135 |
| Ptr | ec2-35-157-26-135.eu-central-1.compute.amazonaws.com |
| 已联系的域名 | [
"images.pexels.com"
] |
| 已联系的 IP 地址 | [
"104.18.66.220",
"35.157.26.135"
] |
| Asns | [
"13335",
"16509"
] |
| Countries | [
"DE"
] |
| 文档哈希值 | 9c7143379bfa05a66a0393e15efcae182af18cd1ca2cdeb92b91cf2a50d21d1e |
| Globals | [
"elems",
"check",
"getdata"
] |
| Cookies | [
"__cf_bm",
"_cfuvid"
] |
| Tls | {
"san": [
"*.netlify.app",
"netlify.app"
],
"cipher": "AES_128_GCM",
"issuer": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
"subject": "*.netlify.app",
"protocol": "TLS 1.3",
"valid_to": "2027-03-19T23:59:59Z",
"valid_from": "2026-02-16T00:00:00Z"
} |
| 域名年龄(天) | 0 |
| Apex age days | 0 |
| Tls age days | 251 |
| TLS 有效天数 | 396 |
| 请求 | 6 |
| 服务提供商评定结果 | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 100,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"ledger"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Ledger"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP 头 | {
"server": "Netlify",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31536000; includeSubDomains; preload"
} |
单独存储的监控快照;不会替换主报告记录,也不会确定当前的可用性。
无社区引用
打开报告无威胁标记
打开报告已登记;未保留判决结果
打开报告68 / 100 · 启发式得分 · 4 brand references · 1 classifications
打开报告此过时的监控分析与上文的主要PhishDestroy分析是分开的。启发式评分并非经过测量的概率。
结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观测时间: · 检索到:
| 供应商结果计数 | {
"timeout": 0,
"harmless": 48,
"malicious": 14,
"suspicious": 0,
"undetected": 30
} |
|---|---|
| 供应商标签 | {
"DNS8": "phishing",
"ESET": "phishing",
"Ermes": "phishing",
"G-Data": "phishing",
"Sophos": "phishing",
"Emsisoft": "phishing",
"Fortinet": "phishing",
"Netcraft": "malicious",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"LevelBlue": "phishing",
"Gridinsoft": "phishing",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing"
} |
| 声誉 | 0 |
| 注册商 | Name.com, Inc. |
| 创建 | 2018-05-08T22:48:05Z |
| 有效期至 | 2025-05-08T22:48:05Z |
| 已更新 | 2024-04-11T16:00:14Z |
| 首次发现 | 2026-10-24T04:28:42Z |
| DNS 记录 | [
{
"ttl": 120,
"type": "A",
"value": "18.208.88.157"
},
{
"ttl": 311,
"type": "AAAA",
"value": "2600:1f18:16e:df01::259"
},
{
"ttl": 120,
"type": "A",
"value": "98.84.224.111"
},
{
"ttl": 311,
"type": "AAAA",
"value": "2600:1f18:16e:df01::258"
}
] |
| Dns at | 2026-10-24T20:18:04Z |
| Jarm | 40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319 |
| 证书 | {
"san": [
"*.netlify.app",
"netlify.app"
],
"issuer": "DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1",
"serial": "cd5d0afb0611b5bd9d692535c0ca7c4",
"sha256": "bc3a8134c21a842e64ea34d488826dd2ba50f59a3bcbaed1e6b71a4242de1478",
"subject": "*.netlify.app",
"valid_to": "2027-03-19T23:59:59Z",
"valid_from": "2026-02-16T00:00:00Z"
} |
| 注册记录 | {
"registrar": "Name.com, Inc.",
"registrar_iana_id": "625",
"registrar_url": "http://www.name.com",
"created": "2018-05-08T22:48:05Z",
"updated": "2024-04-11T16:00:14Z",
"expires": "2025-05-08T22:48:05Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"dns1.p01.nsone.net",
"dns2.p01.nsone.net",
"dns3.p01.nsone.net",
"dns4.p01.nsone.net"
],
"dnssec": "unsigned"
} |
| 邮件配置 | {
"spf_lookups": 0
} |
|---|---|
| CAA 记录 | {
"count": 2,
"domain": "netlify.app",
"issuers": [
"digicert.com;account=2d83e9ac9b6776c3f215150f6ebceea8cefe3bc2e1fb5efffb1d71e200575226"
]
} |
| DNS防护结果 | {
"resolvers": 12,
"blocked_by": [
"CloudFlare Family"
],
"blocked_count": 1
} |
| 页面标题与元数据 | {
"title": "Ledger® Live Login® (en-US) | Ledger Support",
"keywords": "ledger live login, ledger.com/start, ledger wallet",
"description": "Ledger Live Login protects your assets with hardware‑exclusive authentication. Connect your device, enter PIN, and gain instant, secure control of your crypto portfolio."
} |
| 追踪器 | {
"requests": 2,
"trackers": [
{
"name": "Pexels",
"company": "Canva",
"country": "AU",
"category": "Hosting",
"requests": 1
}
]
} |
| 表单与混合内容 | {
"third_party_scripts": 0
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 15,
"tls": 21,
"wait": 29,
"connect": 37,
"download": 16
},
"response_ms": 118
} |
| TLS连接 | {
"alpn": "h2",
"cipher": "TLS_AES_128_GCM_SHA256",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
80,
443
]
} |
| Carbon | {
"bytes": 23470,
"co2_grams": 0.0009,
"cleaner_than": 53
} |
| DNS服务器 | {
"ns": [
{
"ip": "198.51.44.1",
"host": "dns1.p01.nsone.net"
},
{
"ip": "198.51.45.1",
"host": "dns2.p01.nsone.net"
},
{
"ip": "198.51.44.65",
"host": "dns3.p01.nsone.net"
},
{
"ip": "198.51.45.65",
"host": "dns4.p01.nsone.net"
}
],
"zone": "netlify.app"
} |
| Cookies | {
"cookies": [
{
"name": "__cf_bm",
"secure": true,
"http_only": true,
"same_site": "None"
},
{
"name": "_cfuvid",
"secure": true,
"session": true,
"http_only": true,
"same_site": "None"
}
]
} |
| 位置 | {
"ip": "2a05:d014:58f:6200::258",
"asn": "16509",
"org": "Amazon.com, Inc.",
"city": "Frankfurt",
"country": "DE"
} |
| SSL | {
"issuer": "DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1",
"subject": "*.netlify.app"
} |
| DNS 记录 | {
"A": [
"35.157.26.135",
"63.176.8.218"
],
"AAAA": [
"2a05:d014:58f:6200::259",
"2a05:d014:58f:6200::258"
]
} |
| DNSsec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"header": "max-age=31536000; includeSubDomains; preload",
"message": "Site is compatible with the HSTS preload list!",
"compatible": true
} |
| HTTP 安全策略 | {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Get ip | {
"ip": "2a05:d014:58f:6200::258",
"family": 6
} |
| 重定向 | {
"chain": [
"https://ledgeer-live-start.netlify.app"
]
} |
| 页面链接 | {
"internal_count": 1
} |
| HTTP 头 | {
"headers": {
"server": "Netlify",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31536000; includeSubDomains; preload"
}
} |
不是。PhishDestroy 将 ledgeer-live-start.netlify.app 归类为“凭据钓鱼”(风险:高,68/100),首次检测于 2026-10-25。请将该网站视为不安全。
不安全。请勿在 ledgeer-live-start.netlify.app 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
Edge-IP 声誉不属于此域。
位置信息描述的是 IP 网络。
bc3a8134c21a842e64ea34d488826dd2ba50f59a3bcbaed1e6b71a4242de1478*.netlify.appnetlify.app已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
由本地采集流程保留的带时间戳的响应元数据。以下各项数值均对应所显示的存档时间。
http://ledgeer-live-start.netlify.app/https://ledgeer-live-start.netlify.app/Cache-Control: public,max-age=0,must-revalidateContent-Encoding: gzipContent-Type: text/html; charset=UTF-8服务器: Netlifybytes8832public,max-age=0,must-revalidate"Netlify Edge"; hit; ttl=31527169gzip5535text/html; charset=UTF-8Sun, 25 Oct 2026 02:04:50 GMT"be73523c85b0b64c9ca1610fc8a6ef39-ssl-df"Netlifymax-age=31536000; includeSubDomains; preloadAccept-Encoding01M5RCVCC1Y7A7RVM3TVKHZ0BN由采集器保留的数值;较长的值可能在采集时被截短。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
可访问
来源:可用性监控器。每条保留的观测记录均保持独立,包括那些日期或证据哈希相同、但来源或DNS状态不同的记录。状态为“未知”并不意味着该网站已离线。
已存储 52 个仿冒域名
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
ledgeer-live-start.netlify.app 如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 证据指南 ↗
ledgeer-live-start.netlify.app)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
进一步的指导: NIST · 应对网络钓鱼FBI IC3 · reports & evidence联邦贸易委员会(FTC)·退款诈骗
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描将可疑域名提交至我们的威胁数据库——保护社区
报告最近的网络钓鱼报告和观察到的可用性变化
监控IC3 does not accept attachments. Keep original evidence for investigators. IC3 guidance
联邦举报热线1-800-CALL-FBICurrent service: 举报欺诈. England, Wales and Northern Ireland. Scotland: 101.
联络中心0300 123 2040本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。