Security Scan Report: genuine-swan-a712a3.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 4 domains to perform 12 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://genuine-swan-a712a3.netlify.app/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unofficial Netlify-hosted page impersonating Ledger's official Ledger.com/Start onboarding site. No forms captured, but a crypto wallet look-alike on an unattributable subdomain should not be used — go directly to ledger.com.

Risk Factors (5)
Brand impersonation of Ledger on a non-Ledger Netlify subdomain
Claims to be the 'official' vendor onboarding page with no affiliation
Impersonation target is a crypto hardware wallet — recovery-phrase theft vector
Unranked, unattributable shared-hosting subdomain used for a branded finance page
Page content asserts it protects users from fake Ledger setup sites while itself being an unofficial look-alike
Domain age information unavailable

Details

Page Title

Ledger.com/Start® | Getting Started with Ledger® Hardware Wallets

Scan Type

public

Domain Name Analysis

Domain 'genuine-swan-a712a3.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'genuine-swan-a712a3'. The second-level label 'netlify' is 7 characters long with 2 vowels and 5 consonants. Word splitting yields three words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

@ cecger start Overview © WhyltMatters Features Ledger onboarding page Getting Started with Ledger® Ledger.com/Start is the official onboarding page to begin your journey with a Ledger hardware wal...

Page Load Overview

0.67s
Total Load Time
272 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,960 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(98%)🇳🇴no(1%)🇩🇪de(1%)

Website Classification

Primary Category

cryptocurrency blockchain96% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
96%
technology software
94%
education learning
92%
documentation technical
85%
government public service
73%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
463.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1142.250.154.95Google · CDNUnited States
AS15169Google LLC
1104.26.7.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
127--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16863293271FA693B908342E6A666377B2F65D183CA0E1200727E07A85FD3DC6DD2756C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:6USy6le+O3IUSw15+g3cI3uupyybi5oNSPUI:6Jy62ZSw1533F3iCi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70164:M9wTAABgCyAFQgtAEPcCwKiIDwCULGhgmHJgBWCQCm28IJiTiJLATIPgQDXgQJWaVQlAwEhBQea4owQB0J9ACoYGhADmIYhB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:888c89c397d3ffff
Perceptual Hash:bc39c34fc7e12838
Difference Hash:2b3c371737379208
Wavelet Hash:0088808397d3ffff
Color Hash:07000000180

Other Hashes

Crop Resistant:2b3c371737379208

Scan History

Scan history not available

Unable to load historical scan data