tersre-oi-es-5xo[.]pages[.]dev
“Ledger® Live: Login | Your Wallet”
tersre-oi-es-5xo.pages.dev — 未验证. 品牌冒充:Ledger; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 7/91 (alphaMountain.ai, BitDefender, Fortinet, G-Data, Kaspersky); URLScan malicious verdict; PhishDestroy score 93/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This site, registered as tersre-oi-es-5xo.pages.dev, presents itself as "Ledger® Live: Login | Your Wallet," indicating an impersonation of the Ledger cryptocurrency wallet brand. The threat posed is a credential harvesting scam designed to trick users into entering their Ledger Live login credentials on a fraudulent page, potentially leading to theft of cryptocurrency assets.
Technical evidence shows the site was flagged by 10 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, Chong Lua Dao, CyRadar, Ermes, and Fortinet. The domain was created on 2026-03-24, registered through Cloudflare, Inc., and resides on IP address 172.66.47.167 in Canada, also associated with Cloudflare. It uses an SSL certificate from Google Trust Services (WE1) and nameservers jillian.ns.cloudflare.com and rory.ns.cloudflare.com.
The domain status is ACTIVE, with a GridInSoft trust rating of 0 out of 100 and a DOM risk score of 93, indicating a high risk level. It appears on one blocklist. The site remains operational and poses a significant threat to users seeking legitimate Ledger wallet access.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of tersre-oi-es-5xo.pages.dev · checked Mar 24, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。