Security Scan Report: ledger-wnd.org

Site favicon
Submitted: Sep 25, 2026, 2:40:54 PMCompleted: Sep 25, 2026, 2:42:20 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Fake human-verification gate on a 40-day-old, unranked domain mimicking the Ledger brand and independently reported as phishing. No forms on-page, but the CAPTCHA-style front step and page-content phishing indicator make it unsafe.

Risk Factors
Threat-intelligence phishing report on the page's primary domain
Domain name mimics the Ledger wallet brand on a non-official, unranked domain
Standalone 'security check / verify you are human' interstitial with no legitimate CAPTCHA provider behind it
Very new domain (40 days) — weak prior, used only as context
Cisco Umbrella: unranked, no established reputation
Domain age information unavailable

Details

Page Title

Security Check

Scan Type

public

Domain Name Analysis

Domain 'ledger-wnd.org' uses the non-profit oriented generic top-level domain (.org). Its registrable label 'ledger-wnd' stretches across 10 characters with 2 vowels and seven consonants; it also includes 1 hyphen. It segments into three words: ledger, w, nd. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ledger-wnd.org/

Page Load Overview

2.10s
Total Load Time
150 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:266 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service46% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
46%
finance banking
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4158.94.209.214Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
41--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C5F3E6E7450A05639E6D3EB7DADA3E00B065D553ECC2CC84F4EA899C87AD85C3590BEC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Rpja+0QDXX3sb3iX35iuQ0f3f09qzROiC8:zurQDXXcbyncn0f3fl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:172134:NNIAgZEF3RSNAAqEIAiMeAEOqBRi9HraEACBB0IiAiV/EDMAHa1IAAPg2gmcRY0QFeQ+awhuAEikAUALKrKZEoAESEFAKPUA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:071f277fe7e7ffff
Perceptual Hash:a30c8c7363dc7333
Difference Hash:5f6a6acacc083008
Wavelet Hash:0107070767fefcf0
Color Hash:#ad6ce0

Other Hashes

Crop Resistant:5f6a6acacc083008

Scan History

Scan history not available

Unable to load historical scan data