Security Scan Report: live-ledger-device.netlify.app

Redirected to:
https://live-ledger-device.netlify.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://live-ledger-device.netlify.app/

Effective URL:
https://live-ledger-device.netlify.app/
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unofficial Netlify page wearing Ledger's brand and 'Ledger Support' login branding, prompting users to connect a hardware wallet. No form was captured, but this is brand impersonation and a likely crypto-drainer lure — avoid.

Risk Factors (5)
Brand impersonation of Ledger (a hardware-wallet vendor) on a non-Ledger domain
Title and meta tags claim to be official 'Ledger Support'
Cryptocurrency 'connect device / connect wallet' prompts on an unofficial host — typical wallet-drainer funnel
Free shared-hosting subdomain (.netlify.app) where subdomain age is unknown and untrustworthy
Domain absent from Cisco Umbrella top 1M rankings despite claiming to be a major brand
Domain age information unavailable

Details

Page Title

Ledger® Live Login® (en-US) | Ledger Support

Scan Type

public

Domain Name Analysis

The domain name 'live-ledger-device.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'live-ledger-device'. The second-level label 'netlify' is 7 characters long with two vowels and five consonants. Breaking it apart gives 3 words: net, li, fy. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://live-ledger-device.netlify.app/

Page Load Overview

0.45s
Total Load Time
20 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,115 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain47% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
47%
education learning
37%
finance banking
35%
documentation technical
35%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
263.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
32--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10DA2621B76E32512591351AA2BA7135B3B20F007C20ECDA4395C92ACDFDA9D3BD6374E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:aNhw/GDs38EltRZJcFwz98atx4bgJ20CpyyMJOCbe0WstoYDU/T3F1+RZ6PROCNP:aU6FwB8aNoCC3MO11Gcf7unsmIsxS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22803:ZRDmBAGAHQ1AIUIQhTAQwccElsFUZwPWIjgyRDN9vITRIGKpBEQRoIggCgFAHhsEAAmsYoRFscsg3C0igjoWiBKkMSpgIAIB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0020200000007e7e
Perceptual Hash:826d963c39963cc7
Difference Hash:94c9c5c5dd3bdcdc
Wavelet Hash:4771712161017f7f
Color Hash:#2d8665

Scan History

Scan history not available

Unable to load historical scan data