ldgr-live--us.pages.dev
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Opis ldgr-live--us.pages.dev
This domain appears to present itself as a Ledger Live landing page focused on cryptocurrency management. The page title, headings, and body text reference Ledger Live, a well-known companion application for Ledger hardware wallets, and describe features such as portfolio tracking, staking, swapping, and Web3 interaction. The screenshot shows a simple promotional page with a download button and explanatory sections about crypto asset management.
However, the domain itself is hosted on a pages.dev subdomain rather than an official brand-owned primary domain, which is unusual for a major cryptocurrency wallet provider. The naming pattern "ldgr-live--us" closely resembles Ledger branding while abbreviating the brand name, which may indicate an attempt to imitate the legitimate service rather than operate as an official property. Based on the visible content and domain structure, this page appears to be a cryptocurrency-themed site that may be targeting users looking for Ledger Live downloads or account access.
Ocena bezpieczeństwa ldgr-live--us.pages.dev
Multiple security engines flagged this URL as phishing at the time of the scan, with 13 out of 91 detections. The page also appears to imitate Ledger Live branding while using a non-official pages.dev subdomain, and the domain name closely resembles the Ledger brand in a way that may be intended to look convincing to visitors. In the screenshot, the page includes a prominent download prompt, which can be a common lure pattern on credential-harvesting or malware-delivery pages that impersonate cryptocurrency services.
Other signals are mixed but do not outweigh the phishing concerns. Malware scanning did not identify malicious files during this specific check, and several blacklist databases were clean at the time of the scan. Even so, phishing pages often contain little or no overt malware and may instead focus on social engineering, fake downloads, or wallet-seed theft. The combination of multi-engine phishing detections, brand-like naming, and crypto-wallet impersonation patterns is a meaningful risk indicator.
Based on these findings, this website may pose potential risks to visitors.
Opis techniczny
The site is served over HTTPS with a valid TLS certificate issued by Google Trust Services, and it is hosted behind Cloudflare infrastructure on IP address 188.114.97.2. The domain uses Cloudflare nameservers and appears to be deployed on the pages.dev hosting platform. DNSSEC is unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation.
From a technical scanning perspective, no malicious files, external links, or iframe references were identified in the limited page analysis provided. That said, the use of a hosted subdomain that visually aligns with a well-known cryptocurrency brand, combined with phishing detections from multiple security engines, may be more significant than the absence of embedded malware in this snapshot.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?