# start-ledgreco-edge.pages.dev — SUSPICIOUS

> start-ledgreco-edge.pages.dev is a crypto drainer impersonating Ledger, flagged by 2/95 VirusTotal vendors. Avoid entering wallet credentials here.

## Summary
PhishDestroy identifies start-ledgreco-edge.pages.dev as an active crypto drainer posing as a Ledger service. This domain leverages Cloudflare Pages to host fraudulent content, tricking users into connecting their cryptocurrency wallets under the guise of a legitimate interface. The threat actor behind this domain uses Google Trust Services-issued SSL certificates to enhance credibility, making the page appear more authentic to potential victims. The domain resolves to IP 188.114.96.3, which is associated with phishing infrastructure hosting crypto-themed lures.  This domain was flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but confirmed malicious activity. Registered through Cloudflare, Inc., the domain is hosted on Cloudflare Pages, a legitimate service often abused by threat actors to deploy phishing pages rapidly. While the exact registration date is not provided, the domain's recent appearance on blocklists suggests it is a newly established threat. Users should exercise caution, as this domain specifically targets cryptocurrency users by impersonating a trusted brand to steal wallet credentials or drain funds.  If you have visited start-ledgreco-edge.pages.dev, disconnect your wallet immediately and revoke any unauthorized connections through your wallet's interface. Do not enter any credentials or interact further with the page. Report the domain to your security team or block it at the network level. Always verify URLs and use hardware wallets for sensitive transactions to mitigate risks from such impersonation tactics.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/55a364d7-3e6a-4053-bbac-a9ac92ec21d3
- PhishDestroy: https://phishdestroy.io/domain/start-ledgreco-edge.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/start-ledgreco-edge.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/start-ledgreco-edge.pages.dev/
Last updated: 2026-03-22