Security Scan Report: refundledger.com

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 11 HTTP transactions. The main domain is refundledger.com and was registered 1 month ago.

Submitted URL: https://refundledger.com/

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Bare default-WordPress placeholder with no forms or scripts, but the primary domain carries a single-source (unverified) phishing report, which drives an escalated risk score. Treat with caution pending corroboration.

Risk Factors (2)
Single-source, unverified phishing report against the primary domain (automatic escalation for content-malware-type primary-domain indicator)
Domain name suggests a refund/finance ledger service while the site serves only an unconfigured placeholder blog, leaving no legitimate explanation for the domain's purpose
Domain age information unavailable

Details

Page Title

My Blog – My WordPress Blog

Scan Type

public

Domain Name Analysis

You're looking at domain 'refundledger.com' on the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'refundledger' spans 12 characters holding four vowels versus 8 consonants. It segments into two words: refund, ledger. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://refundledger.com/

Page Load Overview

1.71s
Total Load Time
138 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,171 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software79% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
79%
e-commerce shopping
41%
blog personal website
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11198.251.89.229Luxembourg, Luxembourg, Luxembourg
AS53667FranTech Solutions
111--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17FD34B6096F4C8F5357F436B994892285117D811C2457AF5B0FBD2A863CCEE23AE3B4B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:4a8ckRiBmgT0cTrnbO23kE04qPdQZobXemlUVugamQmz5gwo5V2cmz5gwo5V7kph:t8ckoPkEW+ZobXemlUVugamaM2tkv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:136226:AC/AuDWLIMBC4QgnOazJikV0ICASVBIFQTixEAAhAINjEMPIAmMcraCgJQASCkSQJwJgEYEGBgBekHFLFOGAhdAQDHIEk2Wb

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bccec6c6febeb87f
Perceptual Hash:957108df807f00ff
Difference Hash:5010141400626080
Wavelet Hash:bccec2cece888848
Color Hash:#d2798b

Other Hashes

Crop Resistant:5010141400626080

Scan History

Scan history not available

Unable to load historical scan data