Security Scan Report: onlinehelp.ghost.io

Submitted: Jan 3, 2026, 10:21:41 AMCompleted: Jan 3, 2026, 10:23:22 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 2 domains to perform 26 HTTP transactions. The main domain is onlinehelp.ghost.io and was registered NaN years ago.

Submitted URL: https://onlinehelp.ghost.io/live-desktop/

The Cisco Umbrella rank of the primary domain is #42,708 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

High‑risk phishing site impersonating Ledger on a low‑ranking domain.

Risk Factors
Brand impersonation (Ledger) on a low‑ranking, non‑official domain
Final URL domain does not match the Ledger brand
Domain age information unavailable

Details

Page Title

Ledger® Live: Desktop® — Getting Started

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(78%)

Domain Information

You're looking at domain 'onlinehelp.ghost.io' on the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'onlinehelp'. The core label 'ghost' covers 5 characters with one vowel and four consonants. Breaking it apart gives one word: ghost. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://onlinehelp.ghost.io/live-desktop/

Page Load Overview

33.76s
Total Load Time
12
HTTP Requests
2
Domains
569 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:10,371 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
78%
news/blog
45%
cryptocurrency blockchain
42%
corporate
35%
finance banking
29%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4146.75.123.7Frankfurt am Main, Hesse, Germany
AS54113FASTLY
4104.16.174.226United States
4104.16.175.226United States
123--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10EE2B62B96A4153D091302DDBAE3774EBA26884FB19A09D0F2FCC16D5FC2DD19533D8A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:OF4G5dCtpQ0styOo2/EkaRBRJfWtWj9UnP1nFjo13avDm:OF4G5dCtp/KoccBR3j2nPbo13avDm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33569:gTGxIFgHQKcIBgFDMiQQqgCwiA4QQcoEtBipDiBEjDOCBSGMCuoMCngBAyYPCCxSGWGiDiKEHwBiQ+G0LECOFUQijyQBIF8L

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdc7cfc3c3cfc7cf
Perceptual Hash:b14adbce4ecccb08
Difference Hash:491c1c160e1c1e18
Wavelet Hash:a0c6cec2c3c7c3c6
Color Hash:#6c96e0

Other Hashes

Crop Resistant:491c1c160e1c1e18

Scan History

Scan history not available

Unable to load historical scan data