# leedger-com-us-start.pages.dev — SUSPICIOUS

> Beware: Leedger-com-us-start.pages.dev mimics Ledger login pages to steal crypto. VirusTotal flags 0/95, but Cloudflare hides its origin. Check the full report.

## Summary
PhishDestroy identifies leedger-com-us-start.pages.dev as an active cryptocurrency phishing page posing as a Ledger wallet login portal, currently under investigation and assigned a risk level of 'under_investigation'. Users may encounter this site via malicious links or spoofed emails claiming to be from 'Ledger.com' support or security alerts.  This domain resolves to IP 172.66.44.97 and is registered through Cloudflare, Inc., which obscures the true hosting origin, a common tactic among phishing operators. At present, VirusTotal reports 0 out of 95 scanning engines have flagged this domain, indicating it has not yet been widely recognized by automated security tools. Despite being hosted behind Cloudflare's proxy, the domain holds a valid SSL certificate issued by Google Trust Services, which may help it appear legitimate to unsuspecting users. Cloudflare's Pages.dev platform has been historically exploited to host convincing fake login pages that mimic legitimate services such as Ledger, a trusted hardware wallet provider.  To mitigate exposure to this phishing threat, users are advised to avoid clicking on any links purporting to be from Ledger unless they are certain of the sender's authenticity. Always navigate directly to the official Ledger website (ledger.com) via a trusted browser—never through email links. Enable multi-factor authentication (MFA) on all cryptocurrency accounts and consider using hardware wallet recovery phrases offline. Report any suspected phishing attempts involving this domain to Ledger support and update passwords only after verifying the site's URL shows 'https://www.ledger.com' in the address bar. Exercise extra caution with sites hosted on pages.dev subdomains, as they are frequently abused in credential-harvesting campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.97

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b3c36dc8-37ab-4d39-8e5c-d557028a47a0
- PhishDestroy: https://phishdestroy.io/domain/leedger-com-us-start.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/leedger-com-us-start.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/leedger-com-us-start.pages.dev/
Last updated: 2026-04-13