ScanMalware.com

Security Scan Report: lafentwat.gitbook.io

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/02df74ef-55c1-4814-8c4a-83ac814a1937Domain and IP registration (RDAP)/api/v1/rdap/02df74ef-55c1-4814-8c4a-83ac814a1937How often this domain was scanned/api/v1/domain/stats/lafentwat.gitbook.ioScan history for this domain/api/v1/domain/history/lafentwat.gitbook.io?limit=15
This website contacted 12 IPs in 1 country across 5 domains to perform 46 HTTP transactions. The main domain is lafentwat.gitbook.io.

Submitted URL: https://lafentwat.gitbook.io/ru/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

High‑risk phishing site impersonating Ledger wallet on a non‑official domain.

Risk Factors (4)
Brand impersonation on an unrelated domain
Unranked / low‑reputation domain
New or unknown domain age
Poorly rendered content (garbled OCR) indicating possible scam template
Domain age information unavailable

Details

Page Title

Ledger Wallet – Надежный и безопасный кошелек – Ledger В постоянно | ruother network

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'lafentwat.gitbook.io' is registered with subdomain 'lafentwat'. Count 7 characters in 'gitbook' split between three vowels and 4 consonants. Tokenizing the label suggests three words: g, it, book. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Ledger Wallet - Hagen n Sesonacubili xowenex -Ledger B noctosHHo @ Powered by GitBook Ledger Wallet - Hage>kHbIii ® Copy 6esonacHbii KowenexK — Ledger B nocTOAHHO Balero onbiTa padoTbl C KPUNTOBAaN...

Page Load Overview

1.31s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:477 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as ru

Website Classification

Primary Category

cryptocurrency blockchain49% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
37172.64.146.167United States
AS13335CLOUDFLARENET
13172.64.147.209United States
AS13335CLOUDFLARENET
6104.18.40.47United States
AS13335CLOUDFLARENET
3172.64.147.188United States
AS13335CLOUDFLARENET
3104.18.40.68United States
AS13335CLOUDFLARENET
3104.18.41.89United States
AS13335CLOUDFLARENET
32a06:98c1:310d::ac40:92a7United States
AS13335CLOUDFLARENET
32a06:98c1:3101::ac40:93bcUnited States
AS13335CLOUDFLARENET
32606:4700:4407::6812:282fUnited States
AS13335CLOUDFLARENET
32606:4700:4402::ac40:93d1United States
AS13335CLOUDFLARENET
4612--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6C3E8196001FB095DB3EE15633ABE3E80CED677D778D0ADF20DD9A6078803B07A6A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:GfcxLAyWvvt/dVP+O8HyrExxiXBh+q3nRvIOuP1lJcEtiUF9hjwBGVPCcAjjRTqH:S3grt43x4/6A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:123470:OyJIgBIgmooBGIBAIOJA8LVKwgBgIUFlSaABwA4CzgCEdFkgEmIBaEFA4AYoJRJcXQCgwjBGMQZkQAQlAJQHBrIAgEPUgOBj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc7ffc7c7c7ffff
Perceptual Hash:b38ccc3333cccccc
Difference Hash:4d1e168d8d9d0048
Wavelet Hash:0003c3c7c7c7cf1f
Color Hash:N/A

Other Hashes

Crop Resistant:4d1e168d8d9d0048,638e8c2d0d8c8c8d

Scan History

Scan history not available

Unable to load historical scan data