ledger-com-st-art[.]pages[.]dev

The domain ledger-com-st-art.pages.dev is a phishing site involved in brand impersonation targeting the Ethereum brand. It used deceptive content to mimic legitimate Ethereum-related services, aiming to trick users into providing sensitive information. This domain is currently taken offline and is associated with a seed_phish scam type, indicating credential harvesting intent rather than a crypto drainer kit.

Technical indicators show that ledger-com-st-art.pages.dev was registered on September 01, 2025, through Cloudflare, Inc. The domain resolves to IP address 104.21.64.1 located in the US under AS13335 Cloudflare, Inc. It uses SSL certificates issued by Google Trust Services / WE1 and employs technologies including HSTS, Cloudflare, and HTTP/3. VirusTotal detected this domain as malicious by 1 of 95 security vendors, including Trustwave, and it appears on one security blocklist, PhishDestroy. The domain's page title was observed as 'Trezor.io/Start® - Starting Up Your Device | Trezor®', which is misleading and unrelated to the Ethereum brand it impersonates.

Users should consider ledger-com-st-art.pages.dev unsafe and a scam due to its phishing nature. Those who interacted with the site should immediately change any compromised credentials and enable two-factor authentication on affected accounts. Monitoring for fraudulent activity is advised. Suspicious sites like ledger-com-st-art.pages.dev can be reported to relevant cybersecurity organizations or through browser safety tools to help prevent further victimization.