learn-eng-lives[.]pages[.]dev

PhishDestroy identifies learn-eng-lives.pages.dev as an active crypto-drainer domain masquerading as a legitimate language-learning portal. The threat involves tricking users into connecting crypto wallets under the guise of accessing free English lessons. The domain currently carries an under-investigation risk level, indicating active monitoring but insufficient definitive evidence for a high-risk classification. Users should treat this domain as suspicious until further analysis confirms its legitimacy.

This domain was flagged with 6/95 VirusTotal detections, suggesting it has not yet been widely recognized by security vendors. It resolves to IP 172.66.47.83, a Cloudflare-operated address, and is registered through Cloudflare, Inc. The SSL certificate is issued by Google Trust Services, which does not inherently indicate trustworthiness for the domain’s content. The .pages.dev TLD is a legitimate Cloudflare Pages domain, often used for legitimate projects, but threat actors frequently exploit it for phishing and crypto-draining operations. The combination of low detection rates, Cloudflare infrastructure, and a deceptive service impersonation makes this domain a credible threat vector.

Users should avoid interacting with learn-eng-lives.pages.dev entirely due to its high potential for credential theft and crypto wallet draining. If you suspect exposure, immediately revoke any connected wallet permissions and scan your device with reputable security software. PhishDestroy recommends verifying unknown domains through its threat intelligence platform before engaging. Report this domain if encountered to help expand community protection against emerging crypto-drainer campaigns.