start-com-ledger-sso[.]pages[.]dev

Is start-com-ledger-sso.pages.dev Safe? PhishDestroy identifies this domain as a crypto drainer targeting Ledger users under active investigation. The threat remains unresolved as security teams analyze its infrastructure for malicious payloads.

PhishDestroy flags this domain as a Ledger-branded crypto drainer with 0 detections out of 95 VirusTotal vendors, indicating it has evaded immediate detection while maintaining a suspicious profile. Registered via Cloudflare, Inc., it resolves to IP 172.66.46.225 and operates under a Google Trust Services SSL certificate, further obscuring its malicious intent. The lack of blocklist entries suggests it is either newly deployed or employing evasion techniques to bypass automated scanning.

While the current risk status remains under investigation, PhishDestroy urges users to avoid interacting with this domain due to its clear intent to deceive cryptocurrency holders. Analysts should monitor for updates as this campaign may escalate or expand targeting. Users are advised to verify URLs manually, rely on official Ledger communication channels, and report any suspicious activity immediately.