# learn-ledgr-live-logoo.pages.dev — SUSPICIOUS

> learn-ledgr-live-logoo.pages.dev is a crypto drainer impersonating Ledger live, currently active. Flagged by 0 of 95 VirusTotal vendors. Do not interact.

## Summary
PhishDestroy identifies learn-ledgr-live-logoo.pages.dev as an active crypto drainer impersonating Ledger Live, a well-known hardware wallet brand.

This domain, registered through Cloudflare, Inc., resolves to IP 188.114.97.3 and utilizes a Google Trust Services SSL certificate. As of current checks, VirusTotal reports 0 detections out of 95 vendors, indicating it remains unflagged by most scanners. The domain is hosted on Cloudflare Pages and leverages a legitimate-looking subdomain structure to appear authentic to potential victims.

Currently marked as 'under_investigation' with an active status, this domain poses a high risk to cryptocurrency users. Security teams should block the domain at DNS and firewall levels. Users should verify URLs via official Ledger channels and avoid interacting with unsolicited links. Monitor network traffic for connections to 188.114.97.3 as a potential IOC.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/90e23f63-95d8-40ac-8516-0def1c696e4b
- PhishDestroy: https://phishdestroy.io/domain/learn-ledgr-live-logoo.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/learn-ledgr-live-logoo.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/learn-ledgr-live-logoo.pages.dev/
Last updated: 2026-03-24