ledger-live-downlloadd.blogspot.com

Ledger

https://ledger-live-downlloadd.blogspot.com/?m=1 Access site

Screenshot

Investigate

Domain ledger-live-downlloadd.blogspot.com0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 142.251.13.132

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://ledger-live-downlloadd.blogspot.com/?m=1

urlscan

Wayback

archive.today

Cert WE2

crt.sh

Censys

Google CT

Phishunt analysis Beta

36 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+4.5 Brand in title
+3.7 Brand in domain label
+3.4 Cert reuse
+3.4 Shared IP cluster
+3.0 OpenPhish
+2.2 Country mismatch
+1.3 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.6 Long domain
+0.6 Suspicious TLD
+0.3 Free CA
+0.2 Hyphens
+0.1 Deep subdomain

19 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Ledger hardware wallet impersonation page on Blogspot using a typosquatted domain mimicking the Ledger Live download page with deliberate misspelling to evade filters. Confirmed malicious by OpenPhish. Likely targets users seeking the legitimate wallet app to steal seed phrases or deliver malware.

Brand in domain labelOpenPhishKeyword match

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-20 · confidence 88%

Domain & Network

Whois

Registrar MarkMonitor Inc.

Network

IP 142.251.13.132

Country