Phishing detection: ledger-live-download-auth-co.typedream.app
Ledger Screenshot
Screenshot captured by urlscan.io on 2026-10-19T16:48 UTC: our own render of this page came back blank.
Investigate
Domain
ledger-live-download-auth-co.typedream.app0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
188.114.97.3
ipinfo
Greynoise
URL
http://ledger-live-download-auth-co.typedream.app
Phishunt analysis Beta
38
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +3.7 Brand in domain label
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +2.2 Country mismatch
- +1.3 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.8 Brand + login token
- +0.6 Long domain
- +0.6 Registrar reputation
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.4 Hyphens
- +0.3 Free CA
- +0.1 Deep subdomain
23 signals fired · detector v3.0.0
AI analysis AIBeta
Crypto scam
Impersonates Ledger with a long hyphenated subdomain on the Typedream site builder, mimicking a Ledger Live download or authentication page. Likely targets crypto wallet recovery phrases or fake software delivery.
Brand + login tokenBrand in domain labelHyphens
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-19 · confidence 75%
Domain & Network
Whois
Registrar
Squarespace Domains II LLC.
Network
IP
188.114.97.3 Cloudflare CDN
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
WE1
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists