device.installation-ledger.app
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of device.installation-ledger.app
The domain device.installation-ledger.app appears to be a newly created web property using the term “ledger,” which is widely associated with cryptocurrency wallet and hardware-wallet services. Based on the subdomain structure and naming pattern, it may be intended to present device setup, installation, or onboarding content related to a Ledger-branded product or service.
There is no strong evidence in the scan data of an established business presence behind this domain. It is not ranked in major traffic measurements, was registered very recently, and the available metadata does not indicate a mature public-facing website. Given the naming convention and the similarity findings, the site may be attempting to resemble a legitimate cryptocurrency-related brand or support workflow.
Safety Assessment for device.installation-ledger.app
At the time of this scan, no malware detections were reported by 0 out of 91 security engines, and major content-focused threat databases listed in the scan were clean. However, the malware scan did mark the main page as suspicious, which is a low-confidence cautionary signal rather than confirmed evidence of malicious content on its own. The domain's IP address is also listed on one mail-reputation blocklist, which may reflect email or shared-hosting reputation issues and is not, by itself, proof of harmful website activity.
More importantly, this domain closely resembles ledger.com and may be a look-alike intended to benefit from that similarity. That concern is strengthened by several contextual red flags: the domain is only 1 day old, has no measurable traffic ranking, and appears to lack the history typically seen with established services. In cryptocurrency-related contexts, newly registered look-alike domains can present elevated phishing risk even when broad security-engine detections are still at zero.
Following a manual review by the PCRisk team, the published trust score has been adjusted to reflect additional context around phishing risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is behind Cloudflare infrastructure and resolves to an IP address associated with Cloudflare in Toronto, Canada. It uses a valid Let's Encrypt SSL certificate that was active at the time of the scan, which indicates encrypted HTTPS connectivity but does not by itself establish legitimacy. The web server software was not identified in the available scan data.
From a domain-security perspective, the registration is extremely recent, DNSSEC appears to be unsigned, and the domain uses Cloudflare nameservers. The combination of very recent registration, unsigned DNSSEC, and brand-resembling naming may warrant additional caution, especially for a site that appears related to cryptocurrency device setup or account access.
Share your experience with this website. Was it safe? Did you encounter any issues?