defult-leadger-live-en.pages[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of defult-leadger-live-en.pages[.]dev
This domain appears to host a page themed around Ledger Live, a cryptocurrency wallet management application associated with Ledger hardware wallets. The page title, meta description, and visible content present it as a resource for downloading or learning about Ledger Live, including references to crypto asset management, staking, swaps, and hardware-wallet security.
However, the domain itself is not an official-looking Ledger domain and is hosted on a pages.dev subdomain, which is commonly used for static site deployment. The hostname also contains misspellings resembling "default" and "ledger," which may indicate an attempt to imitate a legitimate crypto brand rather than operate as an independently branded service. Based on the available content and classifications, this page appears to be related to cryptocurrency services and may be presenting itself as a Ledger-related landing page.
Safety Assessment for defult-leadger-live-en.pages[.]dev
Multiple security signals raise concern around this website at the time of this scan. It was flagged by 10 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The page content and metadata closely reference Ledger Live and Ledger Wallet, while the actual domain is a third-party pages.dev subdomain with a misspelled Ledger-like name, which may indicate a look-alike page intended to mimic a well-known cryptocurrency brand.
Although the malware scan did not detect malicious files and several blacklist databases showed no listing at the time of this scan, that does not outweigh the phishing-related indicators. Phishing pages often contain little or no malware and can still pose credential theft or wallet-compromise risks. The combination of brand-like presentation, suspicious domain naming, very low trust score, and multi-engine phishing detections suggests elevated risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it is hosted behind Cloudflare infrastructure on IP address 172.66.45.30. The domain uses Cloudflare nameservers and appears to be deployed via the pages.dev hosting platform. DNSSEC is unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation.
From a technical standpoint, the most notable concern is not the TLS setup but the hosting and naming pattern: a branded-looking cryptocurrency page on a third-party subdomain rather than an official brand domain. No malicious files, external links, or iframes were identified in the provided scan data, but phishing pages can still function with minimal visible infrastructure.
Share your experience with this website. Was it safe? Did you encounter any issues?