# ledger-auth-start-live.pages.dev — SUSPICIOUS

> ledger-auth-start-live.pages.dev poses as a Ledger Live login to steal crypto. VirusTotal shows 0/95 detections.

## Summary
PhishDestroy identifies ledger-auth-start-live.pages.dev as an active crypto-draining scam that mimics the official Ledger Live authentication portal to trick users into connecting wallets and approving malicious transactions.

This domain was registered through Cloudflare on an unknown date and first observed resolving to IP 172.66.47.2 with a Google Trust Services SSL certificate. VirusTotal currently flags the site with 0 out of 95 antivirus engines detecting it, underscoring how quickly new drainers fly under the radar and why manual verification is critical.

If you visited ledger-auth-start-live.pages.dev, immediately disconnect your wallet, revoke any recently approved permissions via tools like revoke.cash, and run a full malware scan. Do not enter any seed phrases or private keys on the site. Report the domain to PhishDestroy along with any transaction hashes or wallet addresses for rapid blocklisting and takedown.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.2

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4acd62d1-c74d-4722-a4f9-cca472cb4024
- PhishDestroy: https://phishdestroy.io/domain/ledger-auth-start-live.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledger-auth-start-live.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledger-auth-start-live.pages.dev/
Last updated: 2026-03-22