www-ledger-com-live-app.jvcko.top
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of www-ledger-com-live-app.jvcko.top
This domain currently appears to display a simple landing page offering the domain name for purchase rather than an active service or application. The page title and screenshot indicate a generic "Domain For Sale" presentation with a "Make an Offer" prompt, suggesting the site is being held for resale or temporary parking rather than operating as a full website.
The domain string closely resembles the well-known Ledger brand domain, but based on the visible content at the time of this scan, it does not appear to host an actual cryptocurrency wallet platform, login portal, or product site. Instead, it appears to be a newly registered .top domain using a brand-like naming pattern while presenting a sales page, which may attract attention because of its resemblance to an established brand.
Safety Assessment for www-ledger-com-live-app.jvcko.top
Several risk indicators were present at the time of this scan. The domain was flagged by 8 out of 91 security engines, with multiple detections describing phishing or malicious behavior. In addition, the domain closely resembles ledger.com in plain wording and may be a look-alike intended to benefit from confusion with the Ledger brand. The domain is also extremely new, not ranked for traffic, and uses a naming pattern commonly associated with impersonation or short-lived campaigns.
At the same time, the page content visible in the screenshot appears to be a domain-sale landing page rather than an active phishing form, and the malware scan did not identify flagged files during this snapshot. However, the domain's IP address is listed on one mail-reputation blocklist, which is a minor cautionary signal rather than direct proof of harmful web content. Given the combination of multi-engine detections, very recent registration, and strong resemblance to a known brand domain, these findings raise meaningful concerns.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid TLS certificate issued by Google Trust Services, fronted by Cloudflare infrastructure, and resolving to IP address 172.67.140.116 in Toronto, Canada. The nameservers also point to Cloudflare, indicating the domain is using a CDN and reverse-proxy setup that can obscure origin hosting details.
DNSSEC appears to be unsigned, and the domain was registered only 1 day before the scan. While the certificate itself appears valid, HTTPS alone does not establish legitimacy. The combination of a very new registration, brand-like naming, and reputation flags is more notable here than the basic transport security configuration.
Share your experience with this website. Was it safe? Did you encounter any issues?