# secure-larn-start-ledgr.pages.dev — SUSPICIOUS

> Site secure-larn-start-ledgr.pages.dev is a live credential phishing page mimicking a crypto wallet login (0/95 VT detections).

## Summary
PhishDestroy has identified secure-larn-start-ledgr.pages.dev as an active cryptocurrency wallet drainer that lures victims with a spoofed login portal. When users enter their seed phrase or private key, the page silently transmits the credentials to an attacker-controlled wallet, resulting in immediate fund theft. The domain is still under active analysis, so it has not yet been flagged by most antivirus engines.  

This domain was flagged through automated threat hunting on seed 7aa4d3. Intelligence shows it resolves to 172.66.44.159 and is served via Google Trust Services SSL, which helps it evade browser warnings. VirusTotal currently reports 0 detections out of 95 scanners, and the domain is registered through Cloudflare, Inc., making takedown attempts more complex.  

If you visited this domain, assume your seed phrase or private key may have been compromised. Revoke all wallet permissions immediately via blockchain explorers, transfer remaining assets to a newly created wallet, and enable hardware wallet protections. Scan your device with updated antivirus software and change passwords only on systems you control.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.159

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/secure-larn-start-ledgr.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/secure-larn-start-ledgr.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/secure-larn-start-ledgr.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/secure-larn-start-ledgr.pages.dev/
Last updated: 2026-04-05