usa-ledggr-live.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of usa-ledggr-live.webflow.io
This domain appears to host a Webflow-built page presenting itself as an "Official Site" for Ledger Live, a cryptocurrency wallet management platform associated with Ledger hardware wallets. The page title, meta description, and visible branding all reference Ledger, crypto wallets, and secure asset management, suggesting that the site is attempting to attract users looking for Ledger software downloads or setup guidance.
Based on the screenshot and metadata, the page appears to imitate the look and messaging of a legitimate cryptocurrency product site rather than functioning as an independent informational blog or neutral review page. The domain itself, however, is a Webflow subdomain and uses an unusual spelling pattern in "ledggr," which does not appear consistent with Ledger's primary brand naming. That combination may indicate a look-alike page targeting cryptocurrency users.
Safety Assessment for usa-ledggr-live.webflow.io
Several security signals indicate elevated risk at the time of this scan. The domain was flagged by 13 out of 91 security engines, with multiple detections classifying it as phishing or otherwise malicious. In addition, the page content appears to present itself as an official Ledger Live resource while using a non-official-looking Webflow subdomain and a misspelled brand-like string in the hostname. That resemblance to the Ledger brand may indicate a look-alike page intended to capture trust from users seeking cryptocurrency wallet software.
The malware file scan did not detect malicious files in the limited set that was checked, and major content-focused threat databases listed here were otherwise clean at the time of this scan. However, those cleaner signals are outweighed by the multi-engine phishing detections and the strong visual impersonation cues in the page content. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry shown as 2026-08-25. It is served through Cloudflare infrastructure on IP address 172.64.151.8, with Cloudflare nameservers and hosting geolocated here to Toronto, Canada. The page assets are loaded from Webflow and Cloudfront-related infrastructure, which is consistent with a hosted landing page or microsite deployment.
DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer. No malicious files were flagged in the limited malware scan, but the broader risk picture is driven more by phishing detections and apparent brand imitation than by exploit-hosting indicators.
Share your experience with this website. Was it safe? Did you encounter any issues?