Security Scan Report: ledgere.com.cn

Redirected to:
https://ledgere.com.cn/
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 21 HTTP transactions. The main domain is ledgere.com.cn and was registered 6 months ago.

Submitted URL: http://ledgere.com.cn/

Effective URL:
https://ledgere.com.cn/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 80%

5
Risk Score

The site impersonates Ledger and links to known malware domains, posing a high‑risk phishing threat.

Risk Factors (3)
Brand impersonation (Ledger brand on mismatched domain)
External malicious links (Indicators of Compromise)
New domain (<90 days) with no reputation
Safety Factors (3)
No credential or payment collection forms
No malicious JavaScript or IDS alerts detected
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 5
Domain age information unavailable

Details

Page Title

Ledger官网|全球领先的加密货币硬件冷钱包|安全管理Defi和Web3资产

Scan Type

public

Domain Name Analysis

The domain 'ledgere.com.cn' uses the Chinese country-code top-level domain (.com.cn) without a subdomain. The core label 'ledgere' covers 7 characters with 3 vowels and four consonants. It segments into 2 words: ledger, e. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://ledgere.com.cn/

Page Load Overview

2.13s
Total Load Time
476 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,767 chars
Detector Agreement:40%

Website Classification

Primary Category

cryptocurrency blockchain44% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
44%
finance banking
40%
phishing scam
35%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2152.128.228.85Hong Kong
AS45753Netsec Limited
211--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T135B2E75A41F325077847A5B8AB32535A7264E107D80ECE947FAC099DCFC6CC4DEA3A8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:+Gg/1rYpVy668xtG08LVtYIyifgMHGHYxc4r5IZe4DiZXCbD6B:u/pYpVy668xszjyifgMmHYmu5IbDACba

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23969:FZMguAFBJQDVVFgAqFhwBkmIOAAQ5BMZMCOQEImUUQUICgNYA2UDwAQAgSWTPRFfoKBRN4awQAkgATAFokIAg+GyQhExZEwS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff01616101011919
Perceptual Hash:aa639d3fccc0e21c
Difference Hash:3181818121d531f1
Wavelet Hash:ff416161013d197f
Color Hash:#bf405b

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data