home-ldgr-strt[.]pages[.]dev

This domain, home-ldgr-strt.pages.dev, is flagged as a high-risk brand impersonation resource specifically targeting Ledger, a cryptocurrency hardware wallet provider. The page title, 'Ledger.com/Start – Official Ledger Wallet Setup Guide,' directly mimics the legitimate Ledger wallet initialization process, indicating an intent to deceive users into entering sensitive recovery phrases or private keys. No explicit drainer kit signatures were identified in initial analysis, though the domain structure and content strongly suggest credential harvesting or cryptocurrency theft objectives. Infrastructure analysis reveals the following technical indicators: the domain was registered on March 25, 2026, through Cloudflare Pages, a platform commonly abused for rapid deployment of phishing resources. It resolves to the IP address 188.114.97.3, located in Canada and associated with Cloudflare, Inc. The domain appears on one security blocklist, while VirusTotal detection metrics report 16 out of 95 security vendors flagging the resource as malicious. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which does not mitigate the underlying threat. Google Safe Browsing status is not explicitly provided, though the single blocklist presence and VirusTotal score suggest partial visibility in threat intelligence systems. As of the latest assessment, the domain remains active and continues to host the impersonation content. Users encountering this domain are advised to cease interaction immediately and report the resource to relevant abuse channels. The remaining risk is classified as high due to the domain's operational status, low detection coverage, and direct targeting of cryptocurrency users. Organizations should update web filters and endpoint protection rules to block access to this domain and monitor for related infrastructure, including subdomains or IP associations with the identified registrar and hosting provider.