Security Scan Report: page-ledger-cdn.typedream.app

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 4 domains to perform 58 HTTP transactions. The main domain is typedream.app and was registered 5 years ago.

Submitted URL: https://page-ledger-cdn.typedream.app/en-us

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unranked Typedream subdomain impersonating Ledger (and claiming Coinbase Pro in its title) to push a Ledger Live download from a non-official source. No forms or malware hits captured, but brand impersonation makes it unsafe to use.

Risk Factors (5)
Impersonation of Ledger (and a Coinbase Pro title claim) on a domain unrelated to either brand
Unranked domain not present in Cisco Umbrella top 1M
Unofficial distribution channel for a crypto wallet companion application — a known malware delivery vector
Inconsistent brand metadata (Coinbase Pro title vs. Ledger body vs. 'Bronze Tooth' site name)
Unknown page age on a free/instant shared-hosting subdomain
Domain age information unavailable

Details

Page Title

Official Site® | Coinbase Pro | Digital Asset Exchange®

Scan Type

public

Domain Name Analysis

The domain 'page-ledger-cdn.typedream.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'page-ledger-cdn'. The registrable portion 'typedream' spans 9 characters holding three vowels versus 6 consonants. Word splitting yields 2 words: type, dream. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://page-ledger-cdn.typedream.app/en-us

Page Load Overview

3.98s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Text Length:4,363 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical62% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
62%
cryptocurrency blockchain
60%
finance banking
38%
technology software
27%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.18.15.90Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.13.95Google · CDNUnited States
AS15169Google LLC
8104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.18.14.90Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
587--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19F55843237066904E2FF8EB320CF3E087014652E7F72016FD55A1EE586AD59AC7A974B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:3IzNHyhw8C2zQSeR7TbsI9AwlPp5/P5nXZS6S:YzNS68TzQvRHbsSA+PL/P5nXZS6S

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1324013:VcErQhAgECUASUFQkiGMAEBBApECQ4dQ1OGAAIjAYoAgPWyIEQQgAUtQDAQIimTCvC2AFaEqnq+CBIQkAABOAjOigIZKEEGB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3c3c3c3c3c3c3
Perceptual Hash:b09bc6666466ca9b
Difference Hash:969e9e9696969696
Wavelet Hash:c3c3c3c3c3c3c3c3
Color Hash:#612d86

Scan History

Scan history not available

Unable to load historical scan data