# feq-leger-com-start-us.pages.dev — MALICIOUS

> feq-leger-com-start-us.pages.dev impersonates Ledger in a brand phishing scam. 14/95 VirusTotal vendors flag this domain. Check the full report.

## Summary
PhishDestroy identifies feq-leger-com-start-us.pages.dev as a live Ledger-brand impersonation phishing site currently masquerading as the official "Ledger — Start Securely: Create, Protect, and Own Your Crypto" landing page. The domain is configured to harvest credentials and seed phrases under the guise of a secure crypto wallet setup, directly targeting users who believe they are interacting with the legitimate hardware-wallet manufacturer Ledger.  This domain was flagged by 14 of 95 VirusTotal security vendors and is registered through Cloudflare, Inc. with creation timestamp falling within the last 90 days; it resolves to IP 172.66.45.32 and is served over an SSL certificate issued by Google Trust Services, giving it an air of legitimacy that deceives browser warnings and novice users alike. The page title matches Ledger’s official marketing phrasing almost verbatim, reinforcing the high-fidelity impersonation and increasing the risk of successful credential theft and cryptocurrency loss.  If you visited feq-leger-com-start-us.pages.dev, assume your Ledger recovery phrase or account credentials may have been compromised. Disconnect any wallet software immediately, revoke any session tokens tied to this domain, and generate a new seed phrase on a trusted Ledger device that has never been exposed to this site. Monitor all associated wallet addresses for outgoing transfers and enable transaction notification alerts where available.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP ?)
- Target brand: Ledger
- Page title: Ledger — Start Securely: Create, Protect, and Own Your Crypto

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.45.32

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/400d95ae-0b70-4070-89a5-c7ccb932753b
- PhishDestroy: https://phishdestroy.io/domain/feq-leger-com-start-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/feq-leger-com-start-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/feq-leger-com-start-us.pages.dev/
Last updated: 2026-04-11