leddgarlogn[.]pages[.]dev

PhishDestroy identifies leddgarlogn.pages.dev as an active credential phishing domain impersonating Netflix login pages to harvest user credentials. The domain leverages Cloudflare Pages hosting (172.66.47.186) and a Google Trust Services SSL certificate to appear legitimate, while the phishing kit specifically mimics Netflix's authentication flow to trick victims into entering their account details. The campaign remains under investigation but is confirmed active as of the latest intelligence gathering.

This domain was flagged with 0 detections out of 95 VirusTotal scans, indicating it has evaded detection by major antivirus engines. Registered through Cloudflare, Inc. on an unspecified date, the infrastructure aligns with common phishing hosting patterns that prioritize anonymity and rapid deployment. The lack of blocklist entries suggests this is either a newly launched campaign or one that has successfully evaded detection mechanisms thus far.

Users who visited leddgarlogn.pages.dev should assume their credentials may have been compromised if they entered any login information. Immediately change Netflix account passwords and enable multi-factor authentication. Scan devices for malware using reputable antivirus tools and monitor accounts for unauthorized activity. Report the domain to Netflix's phishing reporting system and avoid interacting with any unsolicited links purporting to be from Netflix.