liveledgr-download[.]pages[.]dev
“Ledger™ Live: Download | Getting Started™”
证据摘要
PhishDestroy identifies liveledgr-download.pages.dev as an ACTIVE phishing domain weaponized to deliver counterfeit software installers under the guise of authentic downloads. The campaign currently presents a LOW TO MEDIUM risk while under investigation; however, its use of Google Trust Services certificates and Cloudflare hosting complicates immediate detection by both users and security tools.
This domain was flagged via automated analysis, revealing a 10/95 detection ratio on VirusTotal at the time of analysis, indicating that no antivirus vendors had yet blacklisted it. It resolves to IP address 188.114.97.3 and operates under Cloudflare, Inc. as the hosting provider. The SSL certificate is issued by Google Trust Services, which may lend false legitimacy to the fraudulent site. Notably, the domain uses Cloudflare Pages to host the phishing content, mimicking a legitimate Google-hosted service.
To mitigate exposure, users should immediately block inbound connections to 188.114.97.3 and the hostname liveledgr-download.pages.dev at the network perimeter. Enterprises should add this domain and IP to DNS sinkholes and proxy deny lists. Never download software from unexpected domains, even those using Google or Cloudflare branding, and verify the publisher through original vendor channels before installation.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月13日
取证情报
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of liveledgr-download.pages.dev · checked Apr 11, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控