slect-ldgr-start[.]pages[.]dev

PhishDestroy identifies the domain slect-ldgr-start.pages.dev as an active brand impersonation threat targeting Ledger users. The page mimics Ledger's official setup page, titled 'Get started with Ledger* | Ledger.com/start,' to deceive visitors into entering sensitive information. This domain is currently under investigation and remains operational as of the latest assessment.

This domain was flagged by 2 of 95 VirusTotal vendors, indicating it has not yet been widely detected as malicious. It is registered through Cloudflare, Inc., resolves to IP address 172.66.44.240, and leverages a Google Trust Services SSL certificate to appear legitimate. The lack of detections suggests a newly deployed or evasive campaign targeting cryptocurrency hardware wallet users.

Users should exercise extreme caution and avoid interacting with slect-ldgr-start.pages.dev. Verify all URLs against Ledger's official domains (e.g., ledger.com/start) before entering any credentials or sensitive data. Report this domain to Ledger’s official fraud channels and use browser extensions or security tools to block access. Organizations should consider adding this domain and IP to firewall or DNS blocklists to prevent accidental exposure.