litelink[.]ghost[.]io
“Ledger Live Desktop™: Multi-Currency Support for the Modern Investor”
litelink.ghost.io — 未验证. 品牌冒充:Ledger; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 3/91 (alphaMountain.ai, Gridinsoft, Webroot); URLQuery 2 alerts; PhishDestroy score 75/100. 注册商: Ghost.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This report details a fraudulent website, litelink.ghost.io, which posed as a cryptocurrency platform. The site’s page title, “Ledger Live Desktop™: Multi-Currency Support for the Modern Investor,” indicates an impersonation of the Ledger brand. As a cryptocurrency scam, the threat involves deceiving users into providing credentials or funds under the guise of a legitimate wallet service.
Technical analysis confirms the site’s malicious nature. VirusTotal flagged it with 4 detections out of 95 vendors. The domain was registered on 2026-02-21 through the registrar Ghost, hosted on IP 151.101.67.7 (United States) within AS54113 Fastly, Inc. It utilized a Let’s Encrypt / R12 SSL certificate and nameservers ghost.map.fastly.net. The site was flagged by alphaMountain.ai, CRDF, Gridinsoft, and Webroot, with a GridinSoft trust score of 0 out of 100.
As of the latest check, the site is DOWN/OFFLINE. The DOM risk score is 56, indicating a high-risk profile. The combination of recent creation, brand impersonation, and multiple security vendor flags underscores the threat. Users should avoid any interaction with this domain.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | litelink.ghost.io |
malicious | Sinkholed |
| DNS4EU | litelink.ghost.io |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 3 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Web platform based on Nginx with LuaJIT for scalable web apps.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of litelink.ghost.io · checked Mar 6, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。