ledger--live-run[.]pages[.]dev
“Download and Install Ledger Live: Step-by-Step Guide”
已存储的观测记录
观测到的标题差异
证据摘要
PhishDestroy identifies ledger--live-run.pages.dev as an active brand-impersonation domain targeting Ledger cryptocurrency wallet users. The domain is configured to mimic the official Ledger Live interface and may be used to harvest seed phrases or redirect transactions to attacker-controlled wallets. No drainer kit artifacts have been extracted at this stage, but the site’s layout and language strongly suggest a crypto-draining operation.
Domain and hosting details are as follows: registered through Cloudflare, Inc., resolving to IP 172.66.47.90, secured with a Google Trust Services SSL certificate, and currently carrying a VirusTotal detection score of 3 out of 95 scanners. The domain was created under Cloudflare’s Pages.dev platform and remains unlisted on Google Safe Browsing as of this assessment. No public blocklists have flagged the domain yet, indicating a low but growing footprint.
This domain is under active investigation as of seed a744d8, with status marked active and risk level under_investigation. PhishDestroy has flagged the page and is monitoring for further infrastructure pivots or drainer kit deployment. Users are advised to avoid interacting with the domain and verify any Ledger-related links using official channels. Remaining risk is moderate due to the domain’s low detection footprint and potential for rapid expansion in phishing campaigns.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of ledger--live-run.pages.dev · checked Mar 28, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控