Security Scan Report: learn-io-ledgr.pages.dev

Redirected to:
https://learn-io-ledgr.pages.dev/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://learn-io-ledgr.pages.dev/

Effective URL:
https://learn-io-ledgr.pages.dev/
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Fake 'Lédger Live' wallet site on a pages.dev subdomain impersonating Ledger, offering unaffiliated wallet downloads. No forms or confirmed malware, but brand impersonation plus installer distribution makes it unsafe.

Risk Factors (5)
Impersonation of the Ledger/Ledger Live brand on a non-official domain
Deceptive Unicode-accented brand spelling and look-alike subdomain to evade detection
Distribution of purported crypto-wallet installers from an unaffiliated free-hosting subdomain
Fabricated corporate history and user statistics used as trust signals
Subdomain on shared hosting platform pages.dev with unknown creation date
Domain age information unavailable

Details

Page Title

Lédger Live Download® | Secure Crypto Wallet & Management

Scan Type

public

Domain Name Analysis

The domain name 'learn-io-ledgr.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'learn-io-ledgr'. Its registrable label 'pages' stretches across 5 characters holding two vowels versus three consonants. Splitting it apart reveals one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

(33 Ledger Live Home Features Download About — Support Secure Your Crypto Future with Lédger Live Lédger Live Manage all your cryptocurrency assets in one secure, intuitive application. Buy, exchang...

Page Load Overview

2.30s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,667 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software58% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
58%
cryptocurrency blockchain
55%
cryptocurrency
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.66.47.106Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.44.150Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
32--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DCA2411E65F720125983A1692FB7575A2B60C003C44ECE6A3AAC978CCFC7AD5CC9334E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:HWs8dgZAXZIyAVGXjV998lAGY0wbsgbM92/iIqlBpdUWAmDk9NtYHa9RGWtt035S:H8xtImFYxPr5Pa6E

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21747:JMHLhdJxgAmUw4M2UoMHCCACPhapXw4AoLQyaEcgBCyCmNMA0KCG+ibCjKEEBtEzgAJJihyTHgmClwm164ADIAIX7oACBRJo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff393d393fbffff
Perceptual Hash:ed6d92928e929a6c
Difference Hash:6916363636d64d0c
Wavelet Hash:bd02020303f3e7ff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data