Security Report: start-us-en-ledgr--x.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6e7b1df3-e9f1-44ef-a087-85d7a52e6e8d Domain and IP registration (RDAP)/api/v1/rdap/6e7b1df3-e9f1-44ef-a087-85d7a52e6e8d Certificate Transparency/api/v1/ct/start-us-en-ledgr--x.pages.dev How often this domain was scanned/api/v1/domain/stats/start-us-en-ledgr--x.pages.dev Scan history for this domain/api/v1/domain/history/start-us-en-ledgr--x.pages.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is start-us-en-ledgr--x.pages.dev and was registered 6 years ago.

Submitted URL: http://start-us-en-ledgr--x.pages.dev/

Effective URL:

https://start-us-en-ledgr--x.pages.dev/

Redirected

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Fake Ledger site on a free pages.dev subdomain impersonating ledger.com/start, already flagged by Google Safe Browsing for social engineering. No forms captured, but treat as brand-impersonation phishing.

Risk Factors (4)

Safe Browsing Social Engineering detection

Brand impersonation of Ledger on a non-official domain (pages.dev)

Deceptive subdomain string mimicking 'ledger start us en'

No forms present, but the page is a funnel toward the Ledger brand on attacker-controlled hosting

Domain age information unavailable

Details

Page Title

Ledger Hardware Wallets - Secure Your Cryptocurrency Assets

Scan Type

public

Favicon Hash

MMH3: 1629405732

MD5: 4a2fb48d0837226e720af64679189c93

Domain Name Analysis

Domain 'start-us-en-ledgr--x.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'start-us-en-ledgr--x'. The core label 'pages' covers 5 characters containing two vowels alongside three consonants. Splitting it apart reveals 1 word: pages. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.72s

Total Load Time

8 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2,736 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain86% confidence

Type: static

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

86%

finance banking

74%

technology software

56%

government public service

48%

documentation technical

47%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	172.66.47.157Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.66.44.99Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	2	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15D921F1A61F320266A47A1B96FB5475B3BA0D503C40ECE593AAC579CDFC2EC1CC9368C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:aTaPp2qrC/+N6QDkqFkPWYuvpcfuslytee33w/h67KuxqFKRXHKqjFEwoQlBKZ2x:aO0oFjYqeZTuoppGm0WMOWza8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19807:QIRkIAMgQwgSC2LSDhQEuEDVMQSCFiA8hyUgIMAgFGasgABEBUCxTGgQkjyDzZCyHYXjQFpCiwSAwEAERMZwJAbEJJ2o2FSB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000e7ffffffffff

Perceptual Hash:f7210d0b0b137377

Difference Hash:dd968e950d4c742a

Wavelet Hash:0000c0c1ffe7ffcb

Color Hash:#2dd251

Other Hashes

Crop Resistant:dd968e950d4c742a,ffffdfdf9fdfdfff

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: start-us-en-ledgr--x.pages.dev