ledger-live-desktop-co[.]pages[.]dev
“Ledger Live: The Ultimate Guide to Securely Track and Manage Your Cryptocurrency Portfolio”
ledger-live-desktop-co.pages.dev — 内容不可用. 品牌冒充:Across; 诈骗类型:Seed Phrase Theft. 证据摘要: VirusTotal 0/93; URLScan malicious verdict; PhishDestroy score 70/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain ledger-live-desktop-co.pages.dev was registered on 21 February 2026 through Cloudflare, Inc. and is hosted on the Cloudflare network (ASN 13335) with the IP address 172.66.45.31 located in the United States. DNS resolution uses the Cloudflare name servers rosa.ns.cloudflare.com and merlin.ns.cloudflare.com. The site presents an HTTPS certificate issued by Google Trust Services under the WE1 root, and the HTTP response is a 403 status code while HSTS and HTTP/3 are advertised, indicating a typical Cloudflare‑protected configuration. A static page title retrieved from the live endpoint reads “Ledger Live: The Ultimate Guide to Securely Track and Manage Your Cryptocurrency Portfolio”, which aligns with the reported scam type of wallet/seed phishing and the broader classification of brand impersonation.
The page has been indexed by PhishDestroy and appears on a single external blocklist. Gridinsoft assigned a trust score of 0 / 100, and VirusTotal records show the domain was scanned by 93 antivirus vendors, none of which raised a detection at the time of analysis. The absence of detections does not constitute assurance of benign intent. The domain is currently listed as offline, and the investigation status remains “under investigation”.
Defensive operators should continue to block DNS resolutions to the domain, enforce HTTPS inspection where possible, and monitor for any future re‑registration or usage of the same infrastructure. Correlation with other Cloudflare‑hosted phishing infrastructure may reveal additional campaigns targeting cryptocurrency users. Indicators of compromise to ingest include the domain name, the IP address 172.66.45.31, the Cloudflare name servers, and the SSL fingerprint associated with the Google Trust Services certificate.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
取证情报
所用技术 · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of ledger-live-desktop-co.pages.dev · checked Mar 7, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。