ledger-home.pages[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ledger-home.pages[.]dev
ledger-home.pages[.]dev appears to be a subdomain hosted on the Pages platform of a major content delivery and hosting provider. Based on the domain wording, it may be attempting to reference or evoke the Ledger brand, which is widely associated with cryptocurrency hardware wallets and account management. The available scan data does not indicate a broad content category from web-classification providers, and the observed resources suggest the page may currently be serving an error or challenge page rather than a fully accessible website.
The domain is not ranked among popular websites and is hosted under a shared pages.dev environment rather than on a standalone branded domain. That setup can be used for legitimate testing or deployment, but in some cases it may also be used for temporary campaign pages. Based on the name alone and the phishing-related detections in the scan results, this page may have been intended to present itself as a cryptocurrency-related service or support page.
Safety Assessment for ledger-home.pages[.]dev
Multiple security signals raise concern for this domain at the time of this scan. It was flagged by 15 out of 91 security engines, with the detections broadly classifying it as phishing. In addition, the domain name closely resembles the Ledger brand while using an unrelated hosted subdomain, which may indicate a look-alike page intended to capture user credentials, wallet recovery phrases, or other sensitive information.
At the same time, the malware scan did not identify malicious files in the limited set of scanned resources, and blacklist checks were largely clean at the time of review. That combination can occur when a page is primarily involved in credential harvesting or brand imitation rather than delivering malware, or when the content is transient or conditionally served. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted behind Cloudflare infrastructure on IP address 188.114.97.2, with a valid TLS certificate issued by Google Trust Services and an expiry date of 2026-07-07. The web server appears to be Cloudflare, and the observed linked resources include Cloudflare challenge and error-related assets, suggesting the page may currently be protected by an access challenge or returning an error state. DNSSEC appears to be unsigned.
From a technical standpoint, the certificate and hosting setup appear standard for modern web delivery and do not by themselves indicate legitimacy. The more notable concern is the use of a hosted subdomain that references a well-known cryptocurrency brand, combined with phishing detections from multiple security engines. No flagged files, suspicious external links, or iframes were identified in the provided scan snapshot.
Share your experience with this website. Was it safe? Did you encounter any issues?