# leige-rd-live-learn.pages.dev — SUSPICIOUS

> Domain leige-rd-live-learn.pages.dev impersonates Ledger with a crypto drainer; 1/95 vendors flagged it. Verify URLs on PhishDestroy before clicking.

## Summary
PhishDestroy identifies an active Ledger brand impersonation phishing campaign operating at leige-rd-live-learn.pages.dev that poses a direct risk to cryptocurrency users. This domain hosts a spoofed interface designed to deceive visitors into connecting their Ledger hardware wallet or entering seed phrases, enabling threat actors to drain cryptocurrency assets silently. The site leverages Ledger’s branding to appear legitimate, targeting users seeking wallet management or transaction services. Cloudflare’s Pages platform is being abused to host the malicious content, increasing the campaign’s credibility due to the trusted infrastructure.  This domain was flagged by only 1 out of 95 security vendors on VirusTotal, indicating low detection coverage despite its malicious intent. It was registered through Cloudflare, Inc., a common choice for threat actors seeking anonymity and rapid deployment. The domain resolves to IP address 188.114.97.3 and is secured with a Google Trust Services SSL certificate, further enhancing its appearance of legitimacy. The campaign is currently active and represents an elevated threat level due to its focus on cryptocurrency theft and its use of trusted infrastructure.  If you visited leige-rd-live-learn.pages.dev, disconnect your Ledger device immediately and revoke any permissions granted. Do not enter your recovery phrase or share wallet details. Use PhishDestroy to verify the legitimacy of any Ledger-related links. Report this domain to Ledger’s official security team and monitor your wallets for unauthorized transactions. Always access Ledger services directly through ledger.com or your official app to avoid similar threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6be77842-3167-410b-aea2-e44b5f8a4542
- PhishDestroy: https://phishdestroy.io/domain/leige-rd-live-learn.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/leige-rd-live-learn.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/leige-rd-live-learn.pages.dev/
Last updated: 2026-04-01