ledgerr-comstart-eng[.]pages[.]dev

PhishDestroy identifies ledgerr-comstart-eng.pages.dev as an active crypto drainer scam currently under investigation. This deceptive domain mimics legitimate crypto service interfaces to trick users into connecting wallets and authorizing malicious transactions. Due to its operational status and resource-hosting infrastructure, users are strongly advised to avoid interaction and verify any related links through PhishDestroy’s threat intelligence platform.

This domain was flagged by 1 of 95 VirusTotal security vendors at the time of analysis, indicating its recent emergence and lack of broad detection coverage. It resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc., using a Google Trust Services SSL certificate for HTTPS encryption. The seed identifier b6265e confirms this is a tracked variant within a known phishing campaign family. While not yet widely blacklisted, the absence of blocking on major threat feeds increases exposure risk.

PhishDestroy currently classifies ledgerr-comstart-eng.pages.dev as an active threat and recommends immediate avoidance and manual inspection of any associated links or QR codes. Users who may have already accessed this domain should revoke any unauthorized wallet connections, transfer remaining assets to secure wallets, and run antivirus scans. To reduce further exposure, enable phishing protection in browser settings and use PhishDestroy’s real-time verification tool for all suspicious URLs.