Security Scan: Sign in to Ledger Live

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2f386ef1-88df-43da-986f-cff9a4e7a121 Domain and IP registration (RDAP)/api/v1/rdap/2f386ef1-88df-43da-986f-cff9a4e7a121How often this domain was scanned/api/v1/domain/stats/helpledger.live Scan history for this domain/api/v1/domain/history/helpledger.live?limit=15

This website contacted 11 IPs in 2 countries across 7 domains to perform 23 HTTP transactions. The main domain is helpledger.live and was registered 2 weeks ago.

Submitted URL: https://helpledger.live/

Effective URL:

https://helpledger.live/login.php

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake Ledger Live sign-in on a 6-day-old lookalike domain that asks for your Secret Recovery Phrase — a seed-phrase phishing page. Never enter your recovery phrase; use ledger.com only.

Risk Factors (5)

Impersonation of Ledger's brand and login flow on a non-official domain

Solicitation of a crypto wallet Secret Recovery Phrase (seed phrase theft)

Domain only 6 days old and unranked

Hidden-field form funnel to portal/open.php

Cross-origin fetch to unranked api.cloaktrack.io

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -77431225

MD5: 740dc1003cf8b39084c0061dbd934edd

Domain Name Analysis

Domain 'helpledger.live' uses the .live top-level domain with no subdomain. Its registrable label 'helpledger' stretches across 10 characters split between three vowels and seven consonants. Segmentation suggests 2 words: help, ledger. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

r a Why Ledger Ledger Wallet Sho LEDGER | y Ledg ig Pp Sign in to Ledger Live Access your accounts, portfolio and apps on this device. Open the official Ledger Live app to continue, or sign in from...

Page Load Overview

0.90s

Total Load Time

263 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,309 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software52% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

52%

healthcare medical

41%

finance banking

41%

documentation technical

40%

cryptocurrency blockchain

32%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	172.67.207.160Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.64.153.104Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.20.244Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.250.154.95Google · CDN	United States	AS15169Google LLC
2	184.24.77.190Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	184.24.77.209Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
2	104.21.93.86Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.34.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.194.227Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	11	-	-