# en-ledgrstart-io-eng.pages.dev — MALICIOUS

> PhishDestroy identifies en-ledgrstart-io-eng.pages.dev as a fake Ledger startup phishing site. 13/95 vendors flagged. Check the full report.

## Summary
PhishDestroy identifies en-ledgrstart-io-eng.pages.dev as an active phishing website masquerading as a legitimate Ledger startup landing page. This domain specifically targets cryptocurrency users by leveraging a fraudulent replica of Ledger’s official interface to harvest seed phrases, private keys, and wallet credentials. The elevated risk level reflects its confirmed malicious intent and ongoing operation, making it a significant threat to users attempting to access Ledger-related services.  This domain resolves to IP address 172.66.47.118 and is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services. VirusTotal analysis shows 13 out of 95 security vendors have flagged this domain as malicious. While Cloudflare’s infrastructure is commonly used for legitimate purposes, the combination of high vendor detection rates, suspicious naming alignment with cryptocurrency services, and hosting on a known fast-flux infrastructure suggests malicious infrastructure leveraging reputable services. The domain’s name, structure, and context strongly indicate an impersonation of Ledger’s official services, designed to deceive users seeking cryptocurrency wallet solutions.  Users are strongly advised to avoid interacting with this domain or any linked pages claiming to be associated with Ledger startups. To mitigate risk, verify all cryptocurrency-related URLs directly from official Ledger channels (e.g., ledger.com) and use bookmarks or trusted sources. Enable multi-factor authentication on all wallet services and never enter private keys or seed phrases on untrusted websites. Report any encounters with this domain to your security team or via platforms such as PhishDestroy to aid in global threat intelligence sharing. This domain remains active as of the latest analysis cycle (seed: 10d76e).

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.118

## Detection Status
- VirusTotal: 13 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bef23c9d-0213-4eb0-82a0-2c763a04dbea
- PhishDestroy: https://phishdestroy.io/domain/en-ledgrstart-io-eng.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-ledgrstart-io-eng.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-ledgrstart-io-eng.pages.dev/
Last updated: 2026-03-24