docs-live-eng.pages[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of docs-live-eng.pages[.]dev
The domain docs-live-eng.pages[.]dev appears to host a webpage presenting itself as a Ledger Live download or informational page for cryptocurrency management. The page title and visible content reference Ledger Live, describing features such as checking balances, sending and receiving crypto, and staking assets. Based on the screenshot, the site is structured like a simple landing page with navigation links and a prominent download button.
The domain itself is a subdomain on pages.dev, which is a static hosting platform commonly used for lightweight websites and temporary deployments. That hosting pattern does not by itself indicate abuse, but it does mean the page is not operating from Ledger's primary branded domain. Based on the branding shown, the page appears to be attempting to represent or imitate a cryptocurrency software or wallet-related service associated with Ledger.
Safety Assessment for docs-live-eng.pages[.]dev
Several risk indicators are present at the time of this scan. The domain was flagged by 6 out of 91 security engines, with multiple detections classifying it as phishing. In addition, the page content and metadata prominently use Ledger Live branding while being hosted on an unrelated pages.dev subdomain rather than an official brand domain, which may indicate a look-alike or impersonation setup intended to gain user trust.
At the same time, some checks were clean: the malware scan did not identify flagged files, and the domain was not listed on the checked blacklist databases at the time of review. Those clean results do not outweigh the phishing detections and the branding/domain mismatch, especially for a cryptocurrency-themed page where users may be prompted to download software or disclose sensitive wallet information.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued through a mainstream certificate authority, and it is hosted behind Cloudflare infrastructure on IP address 172.66.44.106. The domain is a pages.dev subdomain, suggesting deployment through a static hosting environment rather than a dedicated corporate web property. The certificate validity indicates encrypted transport was available at the time of the scan, but HTTPS alone should not be treated as proof of legitimacy.
WHOIS data indicates the subdomain's parent domain environment has been in use for several years, and the nameservers point to Cloudflare. DNSSEC appears to be unsigned. No malicious files or flagged external links were identified in the limited malware scan, but the main technical concern is the mismatch between the hosted domain and the financial-brand presentation, which may be consistent with phishing or deceptive distribution activity.
Share your experience with this website. Was it safe? Did you encounter any issues?