start--ldgr-live[.]pages[.]dev

This domain, start--ldgr-live.pages.dev, is identified as a phishing platform designed to impersonate the legitimate Ledger Live cryptocurrency wallet interface. Analysis indicates the site employs social engineering tactics to deceive users into entering sensitive credentials, including wallet recovery phrases and private keys, under the pretense of account verification or software updates. The domain specifically mimics the branding, layout, and functionality of the authentic Ledger Live application, increasing the likelihood of successful deception among cryptocurrency holders. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 03, 2026, and resolves to the IP address 172.66.44.60, which is geolocated to California and associated with Cloudflare's content delivery network. The domain appears on one security blocklist and is flagged by 20 out of 95 security vendors on VirusTotal, indicating a moderate but elevated detection rate. The SSL certificate, issued by Google Trust Services (WE1), suggests the use of legitimate encryption to lend credibility to the fraudulent site. Notably, the domain has been taken offline, though residual threats may persist through cached or mirrored versions. Users who visited start--ldgr-live.pages.dev should immediately cease all interaction with the site and assume any entered credentials have been compromised. Affected individuals are advised to transfer cryptocurrency assets to a new wallet using a verified and secure device, as recovery phrases or private keys may have been exfiltrated. It is recommended to monitor associated accounts for unauthorized transactions and enable multi-factor authentication on all related platforms. Additionally, users should scan their devices for malware, as phishing sites may deploy secondary payloads. Reporting the domain to relevant security teams and cryptocurrency platforms can aid in mitigating further risks to the broader user base.