ledg-1785875873920859454.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ledg-1785875873920859454.vercel.app
This domain appears to host a webpage presenting itself as a Ledger-branded cryptocurrency wallet and companion app. The page title, branding, and screenshot indicate that it is imitating the look and messaging of Ledger's wallet ecosystem, including references to crypto asset management, apps, services, and hardware-wallet related features.
However, the actual hostname is a long, non-official-looking subdomain on vercel.app rather than a primary brand domain. That setup may indicate a temporary deployment or cloned landing page rather than an official corporate property. Based on the visible content and metadata, the site appears intended to attract users interested in cryptocurrency wallet access, which is a common target area for credential theft and wallet-seed phishing.
Safety Assessment for ledg-1785875873920859454.vercel.app
Multiple scan signals raise concern at the time of this scan. The domain was flagged by 15 out of 91 security engines, with many of those detections classifying it as phishing or malicious. In addition, the page visually presents itself as Ledger while using an unrelated vercel.app subdomain, which may indicate brand impersonation. The presence of files such as anti_bot.js and a PHP endpoint on a hosted landing page may also be consistent with evasive or credential-harvesting behavior, although file-name-based heuristics alone are not conclusive.
Blacklist and reputation data were mixed but still concerning overall. Major content-malice databases were not uniformly listing the domain, but one blacklist source associated with phishing-style detections did flag it, and the domain's IP address is listed on one mail-reputation blocklist. The malware scan did not identify confirmed malicious payloads in the sampled files, but it did apply a generic suspicious heuristic to the domain and several linked resources. Taken together with the strong multi-engine phishing consensus and the Ledger-themed branding on a non-official host, based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.131 in the United States. It presents a valid TLS certificate issued by Google Trust Services, which means the connection appears encrypted in transit; however, valid HTTPS does not by itself verify that the site is legitimate. The domain uses Vercel nameservers and its DNSSEC status is unsigned.
The scanned resources include several static media files, third-party frontend libraries, an anti_bot.js script, and a v5.php endpoint. While those elements do not prove malicious activity on their own, they may be noteworthy in the context of a suspected phishing page impersonating a cryptocurrency brand. The domain age is relatively old for a subdomain-based deployment context, but because this is a hosted subdomain on a platform service, age alone may be less reassuring than it would be for a standalone branded domain.
Share your experience with this website. Was it safe? Did you encounter any issues?