# get-started-with-ldgerlive.pages.dev — SUSPICIOUS

> This fraudulent domain mimics Ledger Live crypto wallet login. PhishDestroy warns users to avoid get-started-with-ldgerlive.pages.dev, hosted on 172.66.44.

## Summary
PhishDestroy identifies get-started-with-ldgerlive.pages.dev as an active phishing site impersonating the official Ledger Live crypto wallet portal. The domain specifically targets cryptocurrency users by presenting a fake login interface designed to harvest seed phrases and private keys. This constitutes a high-risk credential harvesting attack with immediate financial theft implications.

This domain was flagged by PhishDestroy's automated monitoring systems after detecting suspicious registration patterns and mimicked branding. The domain resolves to IP address 172.66.44.240 (Cloudflare infrastructure) and currently shows 0/95 detections on VirusTotal despite active phishing activity. The site operates under Cloudflare, Inc. as registrar with Google Trust Services providing the SSL certificate, which may lend false legitimacy to potential victims. The .pages.dev subdomain structure suggests recent creation, likely deployed specifically for this campaign.

Cryptocurrency users should immediately block this domain and avoid any links claiming to be from Ledger Live. If you entered credentials on this site, revoke all associated wallet permissions immediately and transfer funds to a new wallet using only official Ledger applications. Enable two-factor authentication on all crypto accounts and verify any suspicious links through Ledger's official website channels. Report this domain to your antivirus provider and consider enabling DNS filtering solutions to prevent future access to similar threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.240

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d26f5cb8-89d0-4162-a8bf-4839f6e6c7b8
- PhishDestroy: https://phishdestroy.io/domain/get-started-with-ldgerlive.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/get-started-with-ldgerlive.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/get-started-with-ldgerlive.pages.dev/
Last updated: 2026-03-27