Security Scan Report: usledger.ghost.io

Site favicon
Submitted: Feb 24, 2026, 10:40:16 PMCompleted: Feb 24, 2026, 10:41:26 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is usledger.ghost.io and was registered NaN years ago.

Submitted URL: https://usledger.ghost.io/en-us/

The Cisco Umbrella rank of the primary domain is #42,708 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 82%

7
Risk Score

The site impersonates Ledger's official setup page on a Ghost subdomain; no credential collection but misleading branding makes it high‑risk.

Risk Factors
Brand impersonation: domain does not match the Ledger brand claimed in meta tags and content
Misleading meta tags and page title that suggest official affiliation with Ledger
Use of a reputable third‑party hosting subdomain (ghost.io) to host a brand‑spoofing page
Domain age information unavailable

Details

Page Title

Ledger.com/Start® | Official Guide to Getting Started with Ledger™

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(83%)

Domain Information

The domain 'usledger.ghost.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'usledger'. The registrable portion 'ghost' spans 5 characters containing one vowel alongside four consonants. Segmentation suggests 1 word: ghost. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://usledger.ghost.io/en-us/

Page Load Overview

0.65s
Total Load Time
14
HTTP Requests
2
Domains
639 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:5,875 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software83% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
83%
documentation technical
53%
news/blog
45%
finance banking
44%
cryptocurrency blockchain
44%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7151.101.129.229Germany
7146.75.123.7Frankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
142--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T160D2D56667E10A3E151307CAA9D6774DBB61D047D22C09C0B5FDC2AD5FC2CE2AA23D4D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:7464MtGCtVYxstuOSMuvwnxTCN54/msU7Ojo13avD5:c64MtGCtVCOSMdnWsU7co13avD5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28405:QAxBFCgFEqELQAjq5wQKDkCJgpiTpBDCbIACVAiYAZQA1YAAVCj2BgDUBKCI1DoSBUAnhLiLABEYCq5AACRwF4pC9s0oEBSh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdc3c7c7c7cfcfcf
Perceptual Hash:b066cacbceca9a38
Difference Hash:499e9d1616181c18
Wavelet Hash:a0c2c7c3c3c7c7c6
Color Hash:#583a78

Other Hashes

Crop Resistant:499e9d1616181c18

Scan History

Scan history not available

Unable to load historical scan data