us-laedgore-logins[.]pages[.]dev

On review, PhishDestroy identified us-laedgore-logins.pages.dev as a credential harvesting domain engaged in active phishing operations. This Pages.dev subdomain mimics a legitimate login portal, likely targeting unaware users through social engineering lures. No crypto-drainer kit artifacts were recovered in initial static analysis, suggesting a traditional form-grabbing scheme focused on harvesting webmail, cloud, or corporate credentials. This domain was flagged under seed 2a014b with a VirusTotal score of 15/95 detections, indicating it currently evades most antivirus signatures. It was registered through Cloudflare, Inc., resolving to IP 188.114.97.3 and secured with a Google Trust Services SSL certificate. The Pages.dev platform indicates recent creation, though exact registration date remains unverified at this stage. The domain remains absent from Google Safe Browsing lists and global blocklists as of present checks. The domain remains active and under active investigation by PhishDestroy analysts. Immediate defensive actions include DNS sinkholing via threat intelligence feeds and outreach to Cloudflare Trust & Safety for takedown. While the immediate credential theft risk is high due to active hosting, the overall system impact remains limited pending further pivoting. Users are strongly advised to avoid interaction and verify any similar links using PhishDestroy’s real-time scanner.