ScanMalware.com

Security Scan Report: ledger-production-6g0.pages.dev

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0ed4ed96-e741-4ec1-8a47-39a9ca0b406aDomain and IP registration (RDAP)/api/v1/rdap/0ed4ed96-e741-4ec1-8a47-39a9ca0b406aHow often this domain was scanned/api/v1/domain/stats/ledger-production-6g0.pages.devScan history for this domain/api/v1/domain/history/ledger-production-6g0.pages.dev?limit=15
This website contacted 6 IPs in 1 country across 4 domains to perform 12 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://ledger-production-6g0.pages.dev/

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Self-branded personal finance tracker on a Cloudflare Pages subdomain. Own same-origin login only; no impersonation, no Indicators of Compromise, no YARA or phishing signals. Unknown-age shared hosting keeps it at moderate caution.

Risk Factors (2)
Shared-hosting subdomain on pages.dev with unknown actual creation date and no published reputation
Credential (email + password) form on a hosting-platform tenant whose operator cannot be verified
Domain age information unavailable

Details

Page Title

Ledger

Scan Type

public

Domain Name Analysis

You're looking at domain 'ledger-production-6g0.pages.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'ledger-production-6g0'. The second-level label 'pages' is 5 characters long containing 2 vowels alongside three consonants. Tokenizing the label suggests 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ledger-production-6g0.pages.dev/

Page Load Overview

11.88s
Total Load Time
276 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,479 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking45% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
45%
government public service
33%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
126--

Detected Technologies4

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%
jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T118F2122161FC1D36A11345C8B3D27B2A3E65C203DA4E2104BABD0BF54FE7CD9D91B5AA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:tKNwMf6BjLzxdGrVHImVywRM3a9DGBGtvpiN+PdfMyVWe1/cb8ulTDrxAZIbCFQa:tKFvbwi+NPo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35403:RiJTQIBEQFAEIEECojIj1CQnCDI6BVTA0Cgnf0WABIohIAaGyIEJCgGgayBTKBUAIEcJEMIFEMRULqAAgUagCGACBEJFRoBI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff7ffe7a5ffe7ff
Perceptual Hash:e6cccc2333999966
Difference Hash:1028304c4d300c00
Wavelet Hash:03131b1bc3dbc3c3
Color Hash:#b7bf40

Other Hashes

Crop Resistant:1028304c4d300c00

Scan History

Scan history not available

Unable to load historical scan data