home-ledges-eng[.]pages[.]dev

PhishDestroy identifies home-ledges-eng.pages.dev as an active credential harvesting phishing domain designed to trick users into surrendering login credentials under the guise of a legitimate service. This Pages.dev subdomain mimics a professional or technical landing page, likely targeting users who may click without verifying the full URL. The page is hosted on Cloudflare Pages, leveraging a Google Trust Services SSL certificate to appear trustworthy at a glance. While currently undetected by 95 VirusTotal scanning engines, it resolves to IP 172.66.44.172, a known Cloudflare edge node used for dynamic content delivery. This domain was flagged by PhishDestroy on 2024-06-05 and registered through Cloudflare, Inc. via their Pages service. The SSL certificate was issued by Google Trust Services and remains valid, adding to the site’s deceptive legitimacy. VirusTotal analysis shows zero detections across 95 engines as of the latest scan, indicating it has not yet been widely blacklisted or analyzed by automated defenses. The use of a Pages.dev subdomain and Cloudflare infrastructure suggests an attempt to exploit free hosting and CDN services to evade traditional blocklists. If you visited home-ledges-eng.pages.dev, do not enter any personal information, especially passwords or financial details. Check your browser history and remove the domain from saved entries. If you entered credentials, change your password immediately on the official service website and enable multi-factor authentication. Report the site to your IT team or use PhishDestroy’s reporting tool if available. Monitor accounts for unusual activity and consider running a malware scan on your device.