ledger-com-start-a49[.]pages[.]dev

PhishDestroy identifies ledger-com-start-a49.pages.dev as a domain involved in brand impersonation, specifically targeting the Ledger brand, to potentially drain user accounts, with no known drainer kit associated.

This domain has a VirusTotal score of 7/95, is registered through Cloudflare, Inc., and resolves to the IP address 2a06:98c1:3120::3, it was created on September 05, 2025, and currently has an SSL certificate issued by Google Trust Services / WE1, additionally, it appears on 1 security blocklist and has a page title indicating an internal server error.

The current status of ledger-com-start-a49.pages.dev is offline, having been taken down, however, users should still exercise caution as the domain may be reactivated, and with its elevated risk level, it is crucial for users to remain vigilant and avoid interacting with this domain to minimize the risk of compromised Ledger accounts, as the domain's impersonation threat can still cause significant harm if users are not cautious.