Security Scan Report: en-ledger-us-live-cdn.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 6 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://en-ledger-us-live-cdn.netlify.app/

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Unranked Netlify subdomain presenting itself as Ledger Live Login / Ledger Support using Ledger branding on a misleading hostname. Classic brand impersonation targeting crypto users; no forms captured, but treat as unsafe.

Risk Factors (4)
Brand impersonation of Ledger (crypto hardware wallet) on a non-official domain
Deceptive hostname crafted to resemble a Ledger CDN/login subdomain
Unranked, unaffiliated domain targeting a high-value cryptocurrency audience
Login-focused title/description on a page with no verifiable connection to Ledger
Domain age information unavailable

Details

Page Title

Ledger® Live Login® (en-US) | Ledger Support

Scan Type

public

Domain Name Analysis

The domain name 'en-ledger-us-live-cdn.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'en-ledger-us-live-cdn'. Its registrable label 'netlify' stretches across 7 characters split between 2 vowels and 5 consonants. Tokenizing the label suggests 3 words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://en-ledger-us-live-cdn.netlify.app/

Page Load Overview

0.51s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,822 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software49% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2104.18.66.220Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
263.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
63--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17CB1751B73D4113A05A702DA3AA527A96F21E64BD2154DC030BC426D9FE2DF3F86BF44

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:T0TGeBtJHpTGlSCg8PktARagn9FcFHz2zZsn69Gk/7nrkG3tKn/rp/tfAnO1tnnw:8HNGlC8PlRa69FcFHz2zZG69//rrkG3n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5564:WAiBIkAg2BMAAAIOTFCIMESAAhAAaBCZoSIAYEACiiKNAAABEEIlGWQIhC0QDIAEAIYUGAAAhHAUAkSAYLAnAAAEDICAAEAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe0c0d0d0f0f1
Perceptual Hash:ecb1879eb46b6142
Difference Hash:c0c2838721212123
Wavelet Hash:ffffc0c0d0d0b0d0
Color Hash:#6ce083

Scan History

Scan history not available

Unable to load historical scan data