leedzzr-live[.]pages[.]dev

PhishDestroy identifies leedzzr-live.pages.dev as a credential theft portal impersonating a legitimate service. The domain is currently active and remains under investigation for malicious activity. This site leverages Cloudflare Pages to obfuscate its infrastructure while posing as a trustworthy platform to deceive users into submitting sensitive credentials.

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely recognized as malicious. It is registered through Cloudflare, Inc., resolves to IP 172.66.44.193, and operates under the unique seed identifier 287fc9. The lack of detections and Cloudflare’s anonymizing infrastructure suggest this threat is either newly deployed or employs evasion techniques to avoid detection. Further analysis is required to determine the full scope of its operations, including associated blocklist counts and trust scores.

Due to the active status of leedzzr-live.pages.dev and its potential to harvest user credentials, PhishDestroy recommends users avoid interacting with this domain entirely. If this site has been accessed or credentials have been entered, immediately change passwords for the affected service and enable multi-factor authentication where possible. Report the domain to relevant cybersecurity authorities to aid in its takedown. Monitor financial accounts for suspicious activity if credentials were submitted. This threat remains high-risk until further intelligence is gathered and definitive action is taken.