ScanMalware.com

Security Scan Report: start-ledgr--io-offical.pages.dev

Redirected to:
https://start-ledgr--io-offical.pages.dev/
Site favicon
Submitted: Sep 15, 2026, 12:45:18 PMCompleted: Sep 15, 2026, 12:45:45 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5cdd09b2-3318-42c9-9d7d-1580c0dd627fDomain and IP registration (RDAP)/api/v1/rdap/5cdd09b2-3318-42c9-9d7d-1580c0dd627fCertificate Transparency/api/v1/ct/start-ledgr--io-offical.pages.devHow often this domain was scanned/api/v1/domain/stats/start-ledgr--io-offical.pages.devScan history for this domain/api/v1/domain/history/start-ledgr--io-offical.pages.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is start-ledgr--io-offical.pages.dev and was registered 9 years ago.

Submitted URL: http://start-ledgr--io-offical.pages.dev/

Effective URL:

https://start-ledgr--io-offical.pages.dev/
Redirected

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Non-official pages.dev subdomain impersonating Ledger with typosquatted branding; no credential form, but deceptive brand use warrants HIGH_RISK.

Risk Factors (4)
Brand impersonation of Ledger on a non-official domain
Deceptive subdomain typosquatting (start-ledgr--io-offical)
Shared hosting platform subdomain with unknown age
Unranked domain lacking reputable history
Domain age information unavailable

Details

Page Title

Ledger Wallet Setup Guide: Secure Start

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'start-ledgr--io-offical.pages.dev' is registered, featuring subdomain 'start-ledgr--io-offical'. The registrable portion 'pages' spans 5 characters containing 2 vowels alongside three consonants. Word splitting yields 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://start-ledgr--io-offical.pages.dev/

Page Load Overview

0.55s
Total Load Time
138 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,612 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical50% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
50%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
54--

Detected Technologies1

Tailwind CSS
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T107E027C35CE65425099097DC2CD0F17C4C9E1C5B57E54D507DC520381F997D5C4D7A4D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqIY7YvfAbpli7vkOq0Z4F2swCqXftO/xvjVvVuB9d:hRjy7bglwCqXft+xLhVG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:6e5a7dc626ccfbed68d3818bd10df9c6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c18083c3c3c1c
Perceptual Hash:9b6cb4e3336134c3
Difference Hash:cc71707859717979
Wavelet Hash:673c3c3c3c3c3c1c
Color Hash:#453a78

Other Hashes

Crop Resistant:cc71707859717979

Scan History

Scan history not available

Unable to load historical scan data