un-leder-com-strt[.]pages[.]dev

The domain un-leder-com-strt.pages.dev is a phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It poses an elevated risk as a cryptocurrency scam designed to deceive users into believing they are accessing a legitimate Ledger quick-start guide. No drainer kit was identified, but the site was actively impersonating Ledger’s branding to facilitate fraudulent activity. As of the latest verification, un-leder-com-strt.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of un-leder-com-strt.pages.dev. The domain was flagged by 1 of 95 VirusTotal security vendors, including Phishing Database, and appears on 1 security blocklist (PhishDestroy). It was registered through Cloudflare, Inc. on September 24, 2025, and resolved to the IP address 188.114.97.3, hosted by Cloudflare in Canada. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Get started with Ledger — Quick Start Presentation'. Technologies detected include HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who interacted with un-leder-com-strt.pages.dev should immediately revoke any token approvals granted during the session and transfer cryptocurrency funds to a new, secure wallet. Monitor accounts for unauthorized transactions and enable two-factor authentication (2FA) on all related services. Report the phishing domain to Ledger’s official security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.