app-learn-ledgr-live[.]pages[.]dev

PhishDestroy identifies app-learn-ledgr-live.pages.dev as an active phishing domain masquerading as the legitimate Ledger Live cryptocurrency wallet platform. This domain employs deceptive branding to trick users into entering sensitive credentials, risking theft of funds or personal data. The page mimics official Ledger Live communication channels, exploiting trust in the brand to bypass user vigilance. Security teams should treat this as a high-priority threat due to the potential for financial loss and credential harvesting.

This domain was flagged through automated threat intelligence pipelines, showing zero detections out of 95 VirusTotal engine scans. It is registered via Cloudflare, Inc., resolving to IP address 172.66.47.159 under Google Trust Services SSL certificates. The domain is actively hosted on Cloudflare Pages, a legitimate service often abused for phishing due to its legitimate infrastructure. These characteristics indicate a well-disguised but operationally active campaign targeting cryptocurrency users.

Users who visited this domain should immediately cease any interaction and disconnect from the page. Do not enter any credentials, wallet recovery phrases, or personal information. Flush browser cache and cookies related to Ledger Live or cryptocurrency services. Report the domain to your IT/security team and submit to threat intelligence platforms such as PhishDestroy. Monitor financial accounts and wallet transactions for unauthorized activity. If credentials were entered, assume compromise and rotate passwords and recovery phrases using a clean, offline device.