Security Scan Report: start-ledgr-co.pages.dev

Redirected to:
https://start-ledgr-co.pages.dev/
Site favicon
Submitted: Sep 15, 2026, 12:45:20 PMCompleted: Sep 15, 2026, 12:45:56 PMpubliccompleted

This website contacted 4 IPs in 1 country across 2 domains to perform 6 HTTP transactions. The main domain is start-ledgr-co.pages.dev and was registered 17 years ago.

Submitted URL: http://start-ledgr-co.pages.dev/

Effective URL:

https://start-ledgr-co.pages.dev/
Redirected

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Deceptive pages.dev subdomain impersonating the Ledger wallet brand with a crypto 'setup guide' lure. No forms or IoCs, but the brand/domain mismatch and software-download framing make it unsafe.

Risk Factors (4)
Impersonation of the Ledger hardware-wallet brand on an unrelated, unranked domain
Deceptive domain name crafted to look Ledger-affiliated
Cryptocurrency wallet setup theme used as a lure (high-value target)
Free instant-publishing host (pages.dev) with no verifiable operator identity
Domain age information unavailable

Details

Page Title

How to Set up Ledger Portfolio & Wallet App - Complete Guide

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'start-ledgr-co.pages.dev' is registered with subdomain 'start-ledgr-co'. Its registrable label 'pages' stretches across 5 characters containing two vowels alongside 3 consonants. Splitting it apart reveals 1 word: pages. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://start-ledgr-co.pages.dev/

Page Load Overview

1.67s
Total Load Time
287 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:6,689 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
66%
cryptocurrency blockchain
48%
documentation technical
40%
finance banking
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.47.198Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.44.58Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
64--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T133F2502AA5F321265597A1A86FF7474A7F62C007C10BCE593EAC528C4FC2EC5CD93789

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:B9XlFNFhFPoJF5BWUYEflLhu1DE7aoFCju3y5E5:dDrmJDBjYEfthu1oNy5E5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36197:GIAqQBTCQyhABQBwKOAcL9sghyYW0KAQlQEQmivV1DUEToKoAhgICQsh+gcBhK0BTCgDtwEvIHGA1IQpgAcQgQIA4FDAKR40

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:75012c3c383c38c8
Perceptual Hash:ca316cccb1ce9333
Difference Hash:a5a5c9f171e12111
Wavelet Hash:51013d3d393939f9
Color Hash:#937e1f

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data