Phishing detection: ledgerlive-app.pages.dev
Ledger Investigate
Domain
ledgerlive-app.pages.dev1 CT host on apex
IP
188.114.97.3
URL
https://ledgerlive-app.pages.dev
Cert
Google Trust Services
Phishunt analysis Beta
31
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +5.1 urlscan.io
- +3.7 Brand in domain label
- +3.4 Shared IP cluster
- +2.2 Country mismatch
- +1.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.7 Brand in cert SAN
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.5 Long domain
- +0.3 Free CA
- +0.1 Hyphens
- +0.1 Deep subdomain
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates the Ledger Live desktop application, hosted on Cloudflare Pages. Targets cryptocurrency holders to harvest wallet credentials or recovery seed phrases. Flagged by urlscan and part of a known cluster of similar Ledger phishing infrastructure.
urlscan.ioBrand in domain labelPaaS host
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-20 · confidence 88%
Domain & Network
Whois
Registrar
CloudFlare, Inc.
Network
IP
188.114.97.3
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Google Trust Services
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise