start-ledgerlive[.]pages[.]dev

This domain is assessed as a high-risk brand impersonation page designed to mimic a legitimate crypto asset management interface. Analysis indicates it is impersonating Ledger and presenting itself as a “Ledger Live — Manage Your Crypto™ Assets Safely” portal, which is a common tactic used to deceive users into entering sensitive wallet credentials or recovery phrases. The infrastructure and branding signals strongly suggest credential harvesting intent.

Technical intelligence confirms multiple independent security detections: 17 out of 95 security vendors on VirusTotal classify the domain as malicious, and it appears on at least 1 security blocklist, including blocking by PhishDestroy. The domain was created on April 06, 2026, is registered via Cloudflare, Inc., resolves through Cloudflare infrastructure (IP 172.66.44.111 in CA), and uses a Google Trust Services / WE1 SSL certificate. Despite modern infrastructure masking, the combination of recent domain creation and high detection rate indicates coordinated phishing deployment.

If a user has visited or interacted with this domain, immediate mitigation steps are recommended. Any entered credentials, especially recovery phrases or wallet keys, should be considered compromised. Users should disconnect affected devices from the internet, transfer digital assets to a newly generated secure wallet, and monitor for unauthorized transactions. All passwords reused elsewhere should be changed immediately, and multi-factor authentication should be enabled where possible. The domain should be reported to security vendors and blocked at the network level to prevent further exposure.