Security Scan Report: forward-ledger.com

Site favicon
Submitted: Feb 3, 2026, 3:27:53 PMCompleted: Feb 3, 2026, 3:31:25 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 2 countries across 2 domains to perform 1 HTTP transaction. The main domain is forward-ledger.com and was registered NaN years ago.

Submitted URL: https://forward-ledger.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Site impersonates Ledger on a brand‑new domain and harvests emails – confirmed phishing scam.

Risk Factors
Brand impersonation (Ledger) on a non‑official domain
Critical‑age domain (<7 days)
Credential collection form (email) on a suspicious site
Domain age information unavailable

Details

Page Title

Ledger Recover

Scan Type

public

Language

🇫🇷

French

(46% confidence)

Category

cryptocurrency blockchain

(97%)

Domain Information

The domain 'forward-ledger.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'forward-ledger' spans 14 characters with 4 vowels and 9 consonants; it also includes one hyphen. Tokenizing the label suggests two words: forward, ledger. Median word length is 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://forward-ledger.com/

Page Load Overview

0.48s
Total Load Time
16
HTTP Requests
2
Domains
321 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:46%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:46%
Script Type:Latin
HTML Lang Attribute:en
Text Length:2,561 chars
Detector Agreement:75%
Language mismatch: Declared as en but detected as fr

Website Classification

Primary Category

cryptocurrency blockchain97% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
97%
technology software
95%
corporate business
94%
blog personal website
94%
documentation technical
93%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
892.113.23.133Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
1104.17.25.14United States
AS13335Cloudflare, Inc.
162--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CD2121139C40C14D2260429BBD36B67D8485681DD6339C90B4D706AF4AE4FE0CDA5895

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hR056tCGAx+aY5XExGamDfUQJVqgRC75jGeVymea:T35J5b2gRC7R+6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1205:IAAgAAAAAACAABCAAAoAABAAAACCAACIAAAACAAIAAAgBAAAAgACIAAAAQAAAAAQAAAAgAAAAEAAQAAAAACAAAEgAAEQAAAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffdfdfffe7ff0000
Perceptual Hash:b8994be7440ed669
Difference Hash:02333327960c0b1c
Wavelet Hash:ff899d9fc3e70000
Color Hash:#e06c87

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data