desktop-ledgrcom-do.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of desktop-ledgrcom-do.pages.dev
desktop-ledgrcom-do.pages.dev appears to be a page hosted on the pages.dev platform, which is commonly used for static website hosting and lightweight web applications. The domain string closely resembles the name of a well-known cryptocurrency hardware-wallet brand, while the available categorization data associates the page with financial services and phishing-related classifications.
Based on the hostname structure and hosting environment, this does not appear to be a primary corporate domain but rather a subdomain deployed on a shared cloud hosting platform. That setup can be used for legitimate testing or publishing, but it is also commonly used for short-lived landing pages, including imitation login or wallet-access pages targeting cryptocurrency users.
Safety Assessment for desktop-ledgrcom-do.pages.dev
Multiple scan sources associated this domain with phishing-related activity at the time of this scan. It was flagged by 12 out of 91 security engines, and several web-classification providers categorized it as phishing, fraud, or financial-services related. The domain name also closely resembles a well-known cryptocurrency wallet brand and may be intended to look similar to an official service, which increases the likelihood of look-alike abuse.
At the same time, the page-level malware scan did not identify malicious files in the limited content that was scanned, and major content-malware threat databases listed here did not report active malware distribution at the time of this scan. However, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still worth noting. The very low published trust score and the concentration of phishing verdicts across multiple security engines are stronger indicators than the clean file scan alone.
Based on these findings, this website may pose potential risks to visitors, particularly if it requests wallet credentials, recovery phrases, or other financial account information.
Technical Description
The site is hosted behind Cloudflare infrastructure on IP address 172.66.47.101, with nameservers also provided by Cloudflare. It presents a valid TLS certificate issued by Google Trust Services, which indicates encrypted transport is available, although a valid certificate by itself does not verify the legitimacy of the site's purpose or operator.
DNSSEC appears to be unsigned, which means DNS responses may not benefit from that additional integrity layer. The scanned resources and links suggest the page may currently be serving Cloudflare error or challenge-related content rather than a fully accessible application, but that does not materially offset the phishing-related detections associated with the domain at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?