# start--ledgren.pages.dev — SUSPICIOUS

> PhishDestroy flags start--ledgren.pages.dev as a live crypto drainer impersonating Ledger wallets. Domain hosted on 188.114.96.3 with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies start--ledgren.pages.dev as an active crypto drainer campaign. This domain is currently under investigation for hosting malicious scripts designed to steal cryptocurrency wallet credentials and drain assets.

This domain was flagged with 0 out of 95 VirusTotal detections, indicating it has not yet been widely recognized as malicious by antivirus engines. It is registered through Cloudflare, Inc., resolves to IP address 188.114.96.3, and uses a Google Trust Services SSL certificate. The domain leverages Cloudflare Pages (pages.dev) to host its content, a common tactic among threat actors to rapidly deploy and conceal malicious infrastructure.

Users should treat this domain as HIGH RISK and avoid interaction. For crypto wallet users, verify any unsolicited links through PhishDestroy’s real-time scanner before entering credentials or connecting wallets. Block the domain and IP address at the network level if possible. Report any confirmed interactions to PhishDestroy for further analysis and takedown requests.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/start--ledgren.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/start--ledgren.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/start--ledgren.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/start--ledgren.pages.dev/
Last updated: 2026-04-06