# gen-legerstarted-com.pages.dev — SUSPICIOUS

> gen-legerstarted-com.pages.dev hosts a Leger Wallet phishing scam. Flagged by 0/95 VirusTotal vendors, resolves to 188.114.97.3.

## Summary
PhishDestroy identifies the active domain gen-legerstarted-com.pages.dev as part of a fraudulent campaign impersonating the Leger Wallet cryptocurrency service. This domain is currently under investigation and remains accessible, posing a direct threat to users seeking legitimate cryptocurrency management solutions.


This domain was flagged by 0 of 95 VirusTotal vendors, operates under Cloudflare, Inc., and resolves to IP address 188.114.97.3. While the SSL certificate is issued by Google Trust Services, indicating HTTPS enforcement, this alone does not guarantee legitimacy due to the ease of obtaining such certificates. The domain's infrastructure leverages Cloudflare Pages, a legitimate platform often misused by threat actors for hosting phishing content. No historical blocklist entries were detected at the time of analysis.


Users are strongly advised against interacting with this domain or any associated links. If you have visited this site or entered sensitive information, immediately transfer cryptocurrency assets to a newly generated wallet under your control, revoke any exposed private keys, and monitor financial accounts for suspicious transactions. Report this domain to your cybersecurity team and local authorities to aid in ongoing takedown efforts. Always verify URLs via official sources before providing personal or financial data.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/916bd7b3-9ec1-494a-aac8-ae02df7caf19
- PhishDestroy: https://phishdestroy.io/domain/gen-legerstarted-com.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/gen-legerstarted-com.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gen-legerstarted-com.pages.dev/
Last updated: 2026-04-11