leedzer-live-learn[.]pages[.]dev

PhishDestroy identifies a recently activated phishing campaign using the domain leedzer-live-learn.pages.dev to impersonate the legitimate Ledger cryptocurrency wallet brand. Hosted on Cloudflare Pages with IP 172.66.45.14, the page mimics Ledger’s official site to deceive visitors into entering recovery phrases or wallet credentials. This mimics real Ledger services, increasing the risk of financial theft. This domain was flagged with a current VirusTotal score of 0 detections out of 95 scanners, indicating it has not yet been widely recognized as malicious. Registered through Cloudflare, Inc. and secured with a Google Trust Services SSL certificate, it appears professionally constructed to evade initial detection. The campaign is assessed as active and poses a credible threat to users seeking wallet management or recovery services. If you visited leedzer-live-learn.pages.dev: immediately disconnect from the site, do not enter any seed phrases, passwords, or private keys. Scan your connected devices with an updated antivirus tool. If you entered credentials on the page, revoke access to your Ledger wallet via the official app, transfer funds to a new wallet, and report the incident to Ledger support and local cybercrime authorities if financial loss is suspected. Always verify website domains and use only official Ledger URLs ending in ledger.com