ldger-logen.pages[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ldger-logen.pages[.]dev
The domain ldger-logen.pages[.]dev appears to host a webpage themed around Ledger, a well-known cryptocurrency hardware wallet brand. Based on the page title, visible content, and metadata, the site presents itself as a "Ledger Login" or "getting started" guide focused on accessing and managing crypto assets. The screenshot shows explanatory text about private keys, public addresses, and seed phrases, suggesting an informational or onboarding-style page related to cryptocurrency wallet usage.
However, the domain name itself does not match Ledger's primary brand spelling and is hosted on a pages.dev subdomain, which is commonly used for user-published static content. That combination may indicate an unofficial page rather than a primary corporate property. Based on the available data, the site appears to be positioned within the cryptocurrency or wallet-support space, but its branding and naming pattern raise questions about whether it is genuinely operated by the Ledger company.
Safety Assessment for ldger-logen.pages[.]dev
Multiple scan sources classified this domain as phishing or fraud-related at the time of the scan, and 11 out of 91 security engines flagged it. The domain name closely resembles the Ledger brand while using altered spelling ("ldger-logen"), which may indicate a look-alike page intended to benefit from user confusion. The page title and screenshot also reference Ledger login and crypto asset access, a theme commonly associated with credential harvesting or seed-phrase theft when presented on unofficial domains.
At the same time, the malware scan did not identify malicious files, and several blacklist checks were clean at the time of review. That does not remove the risk, because phishing pages often contain little or no malware and may rely instead on social engineering, brand imitation, and requests for sensitive wallet information. The combination of brand-like naming, phishing-related classifications, very low trust scoring, and crypto-wallet subject matter is a meaningful concern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it appears to be hosted behind Cloudflare infrastructure on a pages.dev deployment. The server IP resolves to Cloudflare hosting in Canada, and the web server is reported as Cloudflare. The domain has been present since 2020 and is set to expire in 2026, which means it is not a newly registered domain, although age alone does not establish legitimacy.
DNSSEC appears to be unsigned, which is not uncommon but provides less DNS integrity assurance than a signed configuration. No malicious files, flagged external links, or iframes were identified in the provided scan data, but the main technical concern is not malware delivery; it is the apparent use of a brand-like domain and cryptocurrency login theme that may support phishing activity.
Share your experience with this website. Was it safe? Did you encounter any issues?