Security Scan Report: pay.ledgerswithlori.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 36 IPs in 2 countries across 18 domains to perform 73 HTTP transactions. The main domain is ledgerswithlori.com and was registered 1 year 3 months ago.

Submitted URL: https://pay.ledgerswithlori.com/

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Unverified single-source phishing report on the primary domain, plus a visible card-payment page. No password form, malware, or exfiltration; self-branded 458-day-old domain. Threat-intel hit drives high risk.

Risk Factors (2)
Single-source, unverified phishing threat-intel report tied to the primary domain.
Visible card-payment UI on the page increases potential impact if the phishing report is accurate.
Domain age information unavailable

Details

Page Title

Online payment @ Ledgers with Lori

Scan Type

public

Domain Name Analysis

The domain name 'pay.ledgerswithlori.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'pay'. The core label 'ledgerswithlori' covers 15 characters with five vowels and 10 consonants. Splitting it apart reveals 3 words: ledgers, with, lori. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

& LED GERS Ledgers with Lori Online payment Please enter any details in the notes section Enter Amount* Notes Add any details or notes about your purchase here. PAYMENT Card Number * ES Card...

Page Load Overview

0.98s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:177 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking57% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
57%
healthcare medical
32%
government public service
30%
news media journalism
30%
adult content
26%

Detected Features

OG: og:product

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3100.49.110.141Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
218.245.86.16Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
23.93.103.69Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
223.62.15.24Akamai · CDNBerlin, State of Berlin, Germany
AS20940Akamai International B.V.
23.174.45.152Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
213.226.244.88Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
234.120.14.251Google · CDNKansas City, Missouri, United States
AS396982Google LLC
217.253.57.206Frankfurt am Main, Hesse, Germany
AS6185Apple Inc.
2142.251.127.92Google · CDNUnited States
AS15169Google LLC
223.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
7336--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11162E9E3D210722E635F729C7497F2493367C547C604DDA0BAEC069A0BD98EE4C2B65B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:WZ1RvDH+PtVumi2bZKtSoG5v9VUFRxTHCnJd/ICNw9aj/s8FEmM8bZqQUTqIQMSP:WZ19H+msN/IzqREqQQUTJG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14652:Y4YhEBqTqwCl4qUFFUGB0DroHBBCCjB2jiGEKCfhSkgJEQBKNAhAnGAQCiBxAsAOQAxhaxM0KIIEQqA0BlWAgt1DCiKCAqJw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:eeeefee6e6feffff
Perceptual Hash:f37788cc2666cc8c
Difference Hash:0a5a324c4e325858
Wavelet Hash:20282820ecfce8e9
Color Hash:N/A

Other Hashes

Crop Resistant:0a5a324c4e325858

Scan History

Scan history not available

Unable to load historical scan data