ledger-wallet-live-us.pages.dev

Ledger

https://ledger-wallet-live-us.pages.dev Access site

Screenshot

Investigate

Domain ledger-wallet-live-us.pages.dev1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

IP 172.66.44.139

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://ledger-wallet-live-us.pages.dev

urlscan

Wayback

archive.today

Cert Let's Encrypt

crt.sh

Censys

Google CT

Phishunt analysis Beta

37 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+4.1 Brand in screenshot
+3.7 Brand in domain label
+2.2 Country mismatch
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.8 Brand + login token
+0.7 Brand in cert SAN
+0.6 Long domain
+0.6 Suspicious TLD
+0.5 Young certificate
+0.3 Free CA
+0.3 Hyphens
+0.1 Deep subdomain

21 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Fake Ledger wallet page on Cloudflare Pages using a combosquat domain blending the Ledger brand with wallet and location terms to harvest cryptocurrency credentials or seed phrases. Confirmed malicious by urlscan and the domain directly embeds the brand name in the apex label.

Brand + login tokenurlscan.ioBrand in domain label

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-19 · confidence 90%

Domain & Network

Whois

Registrar CloudFlare, Inc.

Network

IP 172.66.44.139

Country