Security Scan Report: ledgerlive-us-learn.typedream.app

Redirected to:
https://ledgerlive-us-learn.typedream.app/
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 4 domains to perform 83 HTTP transactions. The main domain is typedream.app and was registered 5 years ago.

Submitted URL: http://ledgerlive-us-learn.typedream.app

Effective URL:
https://ledgerlive-us-learn.typedream.app/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unranked Typedream subdomain impersonating Ledger with a lookalike 'ledgerlive-us-learn' hostname, posing as a Ledger Live login and promoting hardware-wallet purchases; no forms or malware found, but brand impersonation makes it unsafe.

Risk Factors (4)
Impersonation of the Ledger brand (name, '®'/'™' marks, login framing) on a domain that is not ledger.com
Brand-lookalike subdomain used for a crypto wallet login/getting-started funnel
Hardware-wallet sales call-to-action routed from a non-official, unranked host (potential fake shop / affiliate funnel)
No affiliation disclosure anywhere on the page
Domain age information unavailable

Details

Page Title

Ledger® Live: Login | Getting started™ with Ledger® | live*

Scan Type

public

Domain Name Analysis

You're looking at domain 'ledgerlive-us-learn.typedream.app' on the application-focused generic top-level domain (.app) with subdomain 'ledgerlive-us-learn'. The registrable portion 'typedream' spans 9 characters with three vowels and six consonants. Breaking it apart gives 2 words: type, dream. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://ledgerlive-us-learn.typedream.app

Page Load Overview

1.89s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,239 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain90% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
90%
finance banking
87%
technology software
85%
blog personal website
83%
news media journalism
81%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16104.18.15.90Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16192.178.183.95Google · CDNUnited States
AS15169Google LLC
16104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
835--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11DD575363707A900E2FB8EB320CF3D083414692D7B76056FD51A0EE5C6AD5AAC79974B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:xcACH2ybqYVEQ4xjSOqYYzMYUcSFyyi2wXOFoARAmeSPquc6IbMItIcwb6uAgzKn:y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2919392:wBQIIAgA8ncbNGKA2IeEGBMJAEihUKWIgkZCjAFAZeAuwF6w3BAgIQpg0owMqaUEAUQOACUAIIipEMAIAKTHM3GkArEOECEm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3c3dbc3c3c3c3
Perceptual Hash:bd8632a49c9b66b2
Difference Hash:17270f3333271337
Wavelet Hash:c3c3c3c3c3c3c3c3
Color Hash:#784c3a

Scan History

Scan history not available

Unable to load historical scan data