Security Scan Report: ledgerrr.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 2 countries across 9 domains to perform 86 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://ledgerrr.pages.dev

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Ledger-branded support page on ledgerrr.pages.dev impersonates Ledger; primary domain has a phishing report, and OCR shows an email-collection lure. Avoid interaction.

Risk Factors (5)
Brand impersonation of Ledger on a non-Ledger domain
Phishing report against the primary domain
Hosted on free Cloudflare Pages subdomain with unknown creation date
Ledger-themed email collection prompt in OCR
Unranked domain
Domain age information unavailable

Details

Page Title

Support – Ledger Support

Scan Type

public

Domain Name Analysis

The domain 'ledgerrr.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'ledgerrr'. Count 5 characters in 'pages' holding 2 vowels versus 3 consonants. Tokenizing the label suggests one word: pages. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

i 4 LEDGER | LEDGER SECURTY & SAFETY Please enter the email address that you have recieved your ledger reciept on. E-mail >) ‘Support Docs Ed contact us

Page Load Overview

4.98s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,544 chars
Detector Agreement:92%

Website Classification

Primary Category

cryptocurrency blockchain43% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
43%
corporate business
36%
cryptocurrency
30%
e-commerce shopping
26%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
37172.66.45.39Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2018.64.211.4Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
12132.164.187.133Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
6172.66.46.217Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6142.251.20.94Google · CDNUnited States
AS15169Google LLC
618.64.211.80Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6104.17.209.240Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8614--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14F53B6542185202628A781516866B648F3A6731BFB0BE98FFA7C190CFF4CF9F4516F6C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:BF3fz2xV5fdpnaT4TcfdAHlzzOg+E+QWfZqjmOqM+XslbkzbPkf+1OcC:r3fz2xV5fLnvTYdzqjmOqOYIrx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:61612:6AYICgGWlRVAJBZOggEKBhK4RJqUCEBdEh8aLaGolS8giwCjTgpAnQQCYBQkYCAAEriC6ScBUJMMGYUCJHMqgEg0hAELHAAk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfffc3c7e3fffffe
Perceptual Hash:f723dc8857237528
Difference Hash:60000e0c16060000
Wavelet Hash:b0f2c2c2c2c2f2f2
Color Hash:07000e00000

Other Hashes

Crop Resistant:60000e0c16060000

Scan History

Scan history not available

Unable to load historical scan data