eng-ledger-cdn-app.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of eng-ledger-cdn-app.pages.dev
The domain eng-ledger-cdn-app.pages.dev appears to present itself as a Ledger-related download or onboarding page for cryptocurrency wallet software. Its page title and visible content reference Ledger, Ledger Live, and Ledger.com/start, and the screenshot shows branding, product imagery, and download buttons for multiple operating systems. Based on the naming pattern and page content, the site appears intended to attract users looking for Ledger wallet setup or software downloads.
However, this is not the official ledger.com domain. The hostname closely resembles Ledger branding while being hosted on a pages.dev subdomain, which may indicate an unofficial mirror, a look-alike page, or an impersonation attempt. The available classification data also places it in phishing and fraud-related categories rather than as a legitimate cryptocurrency service.
Safety Assessment for eng-ledger-cdn-app.pages.dev
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 91 security engines, and several web-classification sources categorized it as phishing, fraud, or financial-services-related abuse. In addition, a major threat database listed the site for social engineering, which is a stronger indicator than a generic heuristic alone.
The page content also raises concern because the domain closely resembles Ledger branding and appears to imitate the official Ledger download/setup experience while using a different host. That kind of resemblance may be consistent with a look-alike page intended to mislead visitors seeking the real Ledger website. The malware scan also marked the scanned files and linked image resources as suspicious, although those heuristic findings are secondary to the broader phishing detections.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted behind Cloudflare infrastructure on IP address 188.114.97.2, with a valid TLS certificate issued by Google Trust Services and an SSL expiry in 2026. It uses Cloudflare nameservers, and the domain itself is about five years old. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation.
From a security perspective, the main concern is not the TLS setup but the combination of hosting context, look-alike naming, and phishing-related detections. The domain is not ranked in major traffic data, has no MX signal noted in the similarity check, and appears to use a branded cryptocurrency lure on a pages.dev subdomain rather than an official vendor domain.
Share your experience with this website. Was it safe? Did you encounter any issues?