secure-larn-start-ledgr[.]pages[.]dev

PhishDestroy has identified secure-larn-start-ledgr.pages.dev as an active cryptocurrency wallet drainer that lures victims with a spoofed login portal. When users enter their seed phrase or private key, the page silently transmits the credentials to an attacker-controlled wallet, resulting in immediate fund theft. The domain is still under active analysis, so it has not yet been flagged by most antivirus engines.

This domain was flagged through automated threat hunting on seed 7aa4d3. Intelligence shows it resolves to 172.66.44.159 and is served via Google Trust Services SSL, which helps it evade browser warnings. VirusTotal currently reports 0 detections out of 95 scanners, and the domain is registered through Cloudflare, Inc., making takedown attempts more complex.

If you visited this domain, assume your seed phrase or private key may have been compromised. Revoke all wallet permissions immediately via blockchain explorers, transfer remaining assets to a newly created wallet, and enable hardware wallet protections. Scan your device with updated antivirus software and change passwords only on systems you control.