ledger-live-us-web.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ledger-live-us-web.pages.dev
The domain ledger-live-us-web.pages.dev appears to be a page hosted on Cloudflare Pages rather than a primary standalone business domain. Based on the name, it seems intended to reference Ledger and its Ledger Live cryptocurrency wallet software, which is commonly associated with managing hardware wallets and digital assets. The use of a subdomain on pages.dev suggests it may be a hosted project page, landing page, or temporary deployment rather than an official corporate website.
The naming pattern strongly resembles branding used in the cryptocurrency wallet ecosystem, particularly around account access, wallet management, or software downloads. However, the domain itself is not the main ledger.com domain, and the available scan context indicates it may be presenting itself in a way that could be confused with the legitimate Ledger brand. Based on the domain structure and scan findings, this page appears to be related to cryptocurrency-themed content and may be attempting to attract users looking for Ledger Live services.
Safety Assessment for ledger-live-us-web.pages.dev
Multiple security engines flagged this domain as phishing at the time of the scan, with 13 out of 91 detections. In addition, the domain closely resembles ledger.com in plain wording and may be a look-alike intended to capture traffic from users seeking the official Ledger website or Ledger Live application. That resemblance is a meaningful risk factor here, especially because the domain is hosted on a generic pages.dev subdomain rather than the brand's primary domain.
Other signals were mixed. The malware scan did not identify flagged files, and major content-malice blacklist checks were reported as clean at the time of the scan. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still worth noting as a minor caution. The domain also had no measurable traffic ranking in the provided data, which can be consistent with low-visibility or newly deployed campaign pages, even though the subdomain record itself is not brand new.
Taken together, the phishing detections and the strong resemblance to a well-known cryptocurrency brand outweigh the cleaner secondary signals. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served through Cloudflare infrastructure, with hosting attributed to CloudFlare, Inc. and an observed server IP of 188.114.96.0 in Toronto, Canada. It presented a valid SSL/TLS certificate issued by Google Trust Services, expiring on 2026-10-12. A valid certificate helps confirm encrypted transport, but it does not by itself verify that the site is trustworthy or officially affiliated with the brand referenced in the domain name.
DNSSEC was reported as unsigned, which is common but means DNS responses do not appear to have DNSSEC validation protection. The domain uses Cloudflare nameservers and appears to be deployed on a hosted pages.dev environment. No malicious files were identified in the limited file scan provided, but the broader reputation data and naming pattern raise more concern than the basic hosting configuration alone.
Share your experience with this website. Was it safe? Did you encounter any issues?