wallet-ladger-live.pages[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of wallet-ladger-live.pages[.]dev
The domain wallet-ladger-live.pages[.]dev appears to host a web page presenting itself as a cryptocurrency wallet dashboard associated with Ledger Live. The page title references "Ledger Live Crypto Wallet App | Ledger," and the screenshot shows a portfolio-style interface with balances, holdings, staking yield, and recent crypto transactions. Based on the naming and visual presentation, the site appears intended to resemble a crypto wallet management portal.
However, the domain itself is not an official-looking Ledger domain and uses a pages.dev subdomain hosted on a general-purpose web publishing platform. The string "ladger" in the hostname closely resembles "ledger" but is spelled differently, which may indicate an attempt to imitate a known cryptocurrency brand. No clear evidence in the scan data identifies a legitimate operator for this page, so the actual party behind it is not apparent from the available information.
Safety Assessment for wallet-ladger-live.pages[.]dev
This website shows multiple risk indicators at the time of this scan. It was flagged by 12 out of 91 security engines, and blacklist data indicates listings associated with social-engineering or generic malicious-object classifications. In addition, the domain name closely resembles the Ledger brand while using a misspelled variation and a third-party hosting subdomain, which may be consistent with a look-alike phishing setup.
Although the malware scan did not detect malicious files in the small set of scanned resources, that does not outweigh the phishing-related signals. Credential-harvesting and wallet-seed theft pages often contain minimal code and may appear technically clean while still attempting to deceive visitors. The screenshot’s branding, wallet-themed interface, and imitation of a known crypto product further increase concern.
Based on these findings, this website may pose potential risks to visitors. Users should be cautious about entering wallet credentials, recovery phrases, login details, or connecting cryptocurrency accounts on this page.
Technical Description
The site is served over HTTPS with a valid TLS certificate and appears to be delivered through Cloudflare infrastructure, with hosting on a pages.dev environment and an IP address associated with Cloudflare. The certificate status is valid at the time of this scan, but a valid certificate only confirms encrypted transport and does not verify that the site is trustworthy. DNSSEC appears to be unsigned.
From the scan data provided, only a small number of files and external links were observed, with no flagged files and no iframe usage. The lightweight structure is consistent with a simple hosted landing page. The main technical concern is not malware delivery but the apparent brand imitation pattern combined with phishing-related detections and blacklist listings.
Share your experience with this website. Was it safe? Did you encounter any issues?