# pay.kindledledger.com — SUSPICIOUS

> Pay.kindledledger.com impersonates Ledger’s payment portal to steal crypto. Created July 18, 2025, this GoDaddy-registered domain has 0/95 VirusTotal.

## Summary
PhishDestroy identifies pay.kindledledger.com as an active brand-impersonation scam targeting Ledger cryptocurrency users. The domain hosts a fraudulent payment page titled Online payment @ kindledledger.com and uses a GoDaddy SSL certificate to appear legitimate. This site mimics Ledger’s official payment portal to trick visitors into entering seed phrases or private keys, enabling immediate theft of digital assets.  This domain was flagged by PhishDestroy after analysis revealed it was registered on July 18, 2025, through GoDaddy.com, LLC. It resolves to IP address 100.49.0.246 and currently shows zero detections on VirusTotal out of 95 security engines, indicating low short-term detection but high potential harm. The page title, “Online payment @ kindledledger.com,” suggests an attempt to deceive users into believing they are interacting with an official Ledger payment gateway.  If you visited pay.kindledledger.com or entered any information, stop using the provided credentials or wallet immediately. Disconnect any connected devices, revoke API access if applicable, and transfer remaining funds to a newly generated, offline wallet. Scan your device with updated antivirus software and consider changing passwords used on Ledger-related services. Report the domain to Ledger’s official fraud reporting channel and warn others in your network. Do not trust any future communications referencing this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger
- Page title: Online payment @ kindledledger.com

## Domain Intelligence
- Registered: 2025-07-18 19:38:52
- Registrar: GoDaddy.com, LLC
- IP: 100.49.0.246

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b692079e-831c-44d1-989b-a6ecb2c2a153
- PhishDestroy: https://phishdestroy.io/domain/pay.kindledledger.com/
- LLM endpoint: https://phishdestroy.io/domain/pay.kindledledger.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pay.kindledledger.com/
Last updated: 2026-03-25