# start--ledgor--io.pages.dev — SUSPICIOUS

> PhishDestroy identifies start--ledgor--io.pages.dev as a crypto drainer phishing site. 1/95 engines detected this threat. Verify before clicking!

## Summary
PhishDestroy identifies start--ledgor--io.pages.dev as an active crypto drainer phishing domain. This malicious site impersonates legitimate crypto services to trick users into connecting wallets and draining funds. The infrastructure leverages Cloudflare Pages to host the fake login portal, which automates unauthorized token transfers once wallet permissions are granted.  

This domain was flagged by PhishDestroy with an elevated risk rating. Technical indicators include a VirusTotal detection score of 1/95 security vendors, registration through Cloudflare Inc., resolution to IP 172.66.44.173, and a Google Trust Services SSL certificate. The domain employs Cloudflare Pages infrastructure to evade traditional hosting-based blocklists.  

The domain remains active despite low initial detection rates. Users should avoid interacting with this site and verify any crypto-related links using PhishDestroy's real-time scanning tool. Remaining risk is elevated due to the sophisticated drainer kit and active hosting on reputable CDN infrastructure. Immediate blocking of 172.66.44.173 and the domain is recommended.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.173

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bb951dcb-1b6a-48fb-8705-51eeee8e30a5
- PhishDestroy: https://phishdestroy.io/domain/start--ledgor--io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/start--ledgor--io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/start--ledgor--io.pages.dev/
Last updated: 2026-03-22