ledgerr-ccomm-startse[.]pages[.]dev

The domain ledgerr-ccomm-startse.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is presently offline, returning HTTP 403 responses. DNS resolution points to the Cloudflare edge address 172.66.46.226, located in the United States under ASN 13335 (Cloudflare, Inc.). The site employed HSTS and HTTP/3, confirming use of modern Cloudflare infrastructure, and presented a SSL certificate issued by Google Trust Services / WE1. Page metadata shows the title "Suspected phishing site | Cloudflare," and the threat is classified as a Crypto Scam that impersonates the Ledger brand.

Reputation services rate the domain extremely low: Scamadviser assigns a trust score of 1/100, while Gridinsoft reports 0/100. The domain appears on one security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis logged 10 detections out of 93 scanned security vendors, indicating a consensus among multiple scanners of malicious behavior. Nameservers listed are kurt.ns.cloudflare.com and cloe.ns.cloudflare.com.

While the infrastructure details and vendor detections are concrete, the exact content of the hosted page remains unverified because the site is taken offline. Defenders should therefore treat the domain as high‑risk: block network resolutions to 172.66.46.226, add the domain to URL filtering and email security policies, monitor for any resurgence of the host, and correlate logs for any attempted connections from internal hosts. Ongoing vigilance is recommended, especially for users handling Ledger cryptocurrency assets, as the domain’s impersonation purpose aligns with known crypto‑theft campaigns.