Security Scan Report: ledger-live-win.org

Site favicon
Submitted: Sep 25, 2026, 2:40:40 PMCompleted: Sep 25, 2026, 2:42:00 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fake 'Security Check' CAPTCHA on ledger-live-win.org — a 40-day-old, unranked domain impersonating Ledger Live and flagged for phishing. Classic crypto-drainer lure; do not interact.

Risk Factors
Phishing indicator matched against the primary domain itself (single-source, unverified)
Brand impersonation of Ledger Live on a non-official domain
New domain (40 days old) with no Cisco Umbrella ranking
Fake human-verification / CAPTCHA interstitial with no legitimate site content
High-severity network IDS alert (Spamhaus DROP listed traffic)
Domain age information unavailable

Details

Page Title

Security Check

Scan Type

public

Domain Name Analysis

Domain 'ledger-live-win.org' uses the non-profit oriented generic top-level domain (.org) while skipping any subdomain. The registrable portion 'ledger-live-win' spans 15 characters containing five vowels alongside 8 consonants, plus two hyphens. Splitting it apart reveals three words: ledger, live, win. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ledger-live-win.org/

Page Load Overview

3.01s
Total Load Time
85 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:271 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking44% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
44%
cryptocurrency blockchain
41%
documentation technical
36%
gambling betting
35%
e-commerce shopping
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4158.94.209.214Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
41--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C603F7FA784304366C77902A53BFD24EB4769807EC4BC010BDEE90909FD6AD685767E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:wdR99uzP0oUkMiMr09qzarAOYDoPYN5SHIrA0m7eN:uHFoUkMiMr09qzROiCmN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:39361:kCEwCASEg4AmkIABhgEigGwIRWQzCDAUUOQEE3BCSy6DQiBgRAdDs5hL0/AkgwDQIY4PWAYoAihDYBAICDBBTSRBBwgDRQpJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:030f072767effefc
Perceptual Hash:b3260c7963667333
Difference Hash:6f726aeac8100000
Wavelet Hash:0107072767fee4f8
Color Hash:#404cbf

Other Hashes

Crop Resistant:6f726aeac8100000

Scan History

Scan history not available

Unable to load historical scan data