Security Scan Report: sso-site-ledgrr.square.site

Redirected to:
https://sso-site-ledgrr.square.site/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 7 domains to perform 75 HTTP transactions. The main domain is square.site and was registered 7 years ago.

Submitted URL: http://sso-site-ledgrr.square.site

Effective URL:
https://sso-site-ledgrr.square.site/
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake Ledger page on a lookalike 'ledgrr' Square subdomain claiming to be the official Ledger.com/start site. No credential or payment form was captured yet, but the brand impersonation and deceptive hostname make it unsafe.

Risk Factors (4)
Impersonation of a different entity's brand (Ledger) on a mismatched, typosquatted-looking hostname
Page text claims to be the official Ledger.com/start site, which is false on this domain
Disposable free-tier storefront used as the delivery vehicle, with no relationship to the impersonated brand
Unranked domain with unknown page-level age behind a shared-hosting apex
Domain age information unavailable

Details

Page Title

Official Site® | Ledger.com/Start® | Getting started

Scan Type

public

Domain Name Analysis

Domain 'sso-site-ledgrr.square.site' uses the .site top-level domain with subdomain 'sso-site-ledgrr'. The second-level label 'square' is 6 characters long with three vowels and 3 consonants. Splitting it apart reveals 1 word: square. No strong language cues emerged from the frequency lists.

Screenshot

(LEDGER Take control of your crypto in Ledger Live Web Manage your assets in one app. Version: v304:5 Coin Management Send & receive coins, track your portfolio, trade assets or pay for daily ess...

Page Load Overview

1.63s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:203 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping70% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
70%
finance banking
54%
technology software
31%
documentation technical
26%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
58146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1474.115.51.5United States
AS27647Weebly, Inc.
12104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1274.115.51.4United States
AS27647Weebly, Inc.
1234.111.148.117Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1274.115.51.7United States
AS27647Weebly, Inc.
756--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C8F3C4D65618029C914B8ABDEF2FFE05131FB06AB9448980B68EC26C97DF5D2F71352C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:JLTkTqUWT3t622Op5J8Unwmn/BbMH25opqnaxXvUmXjuQiZoaza+bWnBYvrP7c2S:JZFDq9zq9LtOERQ7HpcaRsKP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:172748:EEIpwdSEAsCAZBYhZQyJQBBsQIOODRDiQyCsBcMB4LbwEIhgA4Jo4gZUEBIQxITVAXCJCkhhFQDCwoChIgUBAKksC8ocFoE0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff81818181bdb9bd
Perceptual Hash:ef65d29390e49296
Difference Hash:632323233b3b2b2b
Wavelet Hash:ff81818181bdb9b9
Color Hash:17000e00000

Scan History

Scan history not available

Unable to load historical scan data