# ledgercoim-start.pages.dev — SUSPICIOUS

> ledgercoim-start.pages.dev is a crypto drainer impersonating Ledger wallets. Verify safety on PhishDestroy before interacting — flagged by 0 of 95 VirusTotal.

## Summary
PhishDestroy identifies ledgercoim-start.pages.dev as an active crypto drainer domain currently under investigation. The domain mimics Ledger wallet services to deceive users into connecting crypto wallets and approving malicious transactions. Security researchers and users are advised to avoid interaction until further analysis is complete.


This domain was flagged by 0 of 95 VirusTotal vendors and resolves to IP 172.66.47.120 through Cloudflare, Inc. The SSL certificate is issued by Google Trust Services. No blocklist entries were recorded at the time of analysis, and no trust scores (e.g., PhishTank, OpenPhish, or Google Safe Browsing) currently flag this domain. The domain was registered recently, with no historical data suggesting prior malicious use.


While under investigation, users should treat this domain as HIGH RISK. Avoid clicking links, connecting wallets, or entering credentials. Verify the legitimacy of any Ledger-related domains using PhishDestroy’s real-time database. If interaction has already occurred, revoke any wallet approvals immediately and transfer assets to a secure wallet. Monitor for unauthorized transactions and report suspicious activity to Ledger’s official support channels.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.120

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8219c7f0-ca83-44bc-a15d-7bd09c0a4d5d
- PhishDestroy: https://phishdestroy.io/domain/ledgercoim-start.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledgercoim-start.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledgercoim-start.pages.dev/
Last updated: 2026-03-29