ledgrlive-en-login-us.pages[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ledgrlive-en-login-us.pages[.]dev
This website appears to present itself as an informational guide for Ledger Live, the software used with Ledger cryptocurrency hardware wallets. The page title and visible content describe logging in, getting started, and managing crypto assets, with references to Ledger devices such as the Nano X and Nano S Plus. Based on the wording and layout, the site seems intended to look like a help or onboarding page for cryptocurrency wallet users.
However, the domain itself is hosted on a pages.dev subdomain rather than an official brand-owned domain, which may be inconsistent with how major financial or cryptocurrency hardware providers typically publish primary login or setup resources. The content appears to reference the Ledger brand, but based on the available scan data, it is not possible to verify that this page is operated by Ledger or an authorized representative.
Safety Assessment for ledgrlive-en-login-us.pages[.]dev
This domain was flagged by 13 out of 91 security engines at the time of the scan, with multiple detections indicating phishing-related concerns. That is a meaningful warning signal, especially because the page uses Ledger branding and presents itself as a login or getting-started resource for a cryptocurrency wallet product. The combination of a brand-referencing subdomain, crypto-related theme, and repeated phishing classifications may indicate an attempt to imitate a legitimate service.
At the same time, the malware scan did not identify malicious files on the page during this specific check, and several blacklist databases did not list the URL at the time of review. That said, phishing pages often contain little or no malware payload and may instead focus on credential theft, wallet recovery phrase harvesting, or social engineering. In cases like this, a clean file scan does not outweigh the branding and detection concerns.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate and supports TLS 1.3. It is hosted behind Cloudflare infrastructure on a pages.dev subdomain, with hosting geolocated to Canada in this scan. The certificate status appears normal, but valid encryption only indicates that traffic is encrypted in transit; it does not confirm that the site is legitimate.
The domain has existed for several years and is registered through Cloudflare, Inc., which can make it appear more established than a newly created domain. DNSSEC appears to be unsigned, and the site uses Cloudflare nameservers. A notable technical concern is the use of a branded cryptocurrency-related login/help page on a third-party hosted subdomain rather than a clearly official corporate domain, which may be consistent with impersonation or phishing setups.
Share your experience with this website. Was it safe? Did you encounter any issues?