learn-eng-ldger[.]pages[.]dev

PhishDestroy identifies learn-eng-ldger.pages.dev as a crypto drainer page built to trick users into connecting their digital wallets and draining funds without consent. The site masquerades as a legitimate English-learning resource but is engineered to harvest private keys or seed phrases once a wallet connection is approved. Once credentials are captured, the threat actor can silently transfer assets to external wallets and leave victims with empty accounts in minutes. This domain was flagged by PhishDestroy on 2024-09-12 at 14:32 UTC after zero out of ninety-five VirusTotal engines detected the payload as malicious. Registered on Cloudflare, Inc., it resolves to IP 172.66.47.111 and holds a Google Trust Services SSL certificate to appear authentic. The combination of zero detections, Cloudflare hosting, and a Google-issued certificate is typical of newly launched drainers designed to evade early detection while rapidly targeting crypto users. If you visited learn-eng-ldger.pages.dev, disconnect your wallet immediately without approving any transactions, revoke any wallet approvals via your wallet’s revoke tool, and scan your device with updated antivirus software. Report the domain and any wallet interaction to PhishDestroy for takedown and threat intelligence sharing. Never enter seed phrases or private keys on untrusted sites.