Phishing detection: ledgerlive-desktop-ask.pages.dev
Ledger Screenshot
Investigate
Domain
ledgerlive-desktop-ask.pages.dev1 CT host on apex
urlscan
VirusTotal
Whois
IP
188.114.97.3
ipinfo
Greynoise
URL
https://ledgerlive-desktop-ask.pages.dev
Phishunt analysis Beta
35
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +5.1 urlscan.io
- +4.1 Brand in screenshot
- +3.7 Brand in domain label
- +3.4 Shared IP cluster
- +2.2 Country mismatch
- +1.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.7 Brand in cert SAN
- +0.6 Long domain
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Free CA
- +0.2 Hyphens
- +0.1 Deep subdomain
20 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site impersonating Ledger Live on a Cloudflare Pages free host targets cryptocurrency wallet credential harvesting. The Ledger brand appears directly in the subdomain label and the domain has been independently flagged as malicious by urlscan.
Brand in domain labelPaaS hosturlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-09 · confidence 72%
Domain & Network
Whois
Registrar
CloudFlare, Inc.
Network
IP
188.114.97.3
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Google Trust Services
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists