live-leedge-app[.]pages[.]dev

PhishDestroy identifies the domain live-leedge-app.pages.dev as an active credential harvesting scam targeting unsuspecting users. The site is currently operational and poses an elevated risk to visitors due to its deceptive design and malicious intent. No specific brand impersonation has been confirmed at this time, but the site’s behavior aligns with classic phishing methodologies aimed at stealing login credentials. This domain was flagged by 1 of 95 VirusTotal security vendors, indicating limited but present malicious detection. It is registered through Cloudflare, Inc., resolves to the IP address 188.114.97.3, and operates under a Google Trust Services SSL certificate, which may lend an air of legitimacy to unsuspecting users. While the exact creation date and blocklist count are not publicly disclosed, the domain’s low trust scores and minimal detection rate suggest a recently deployed or carefully obfuscated threat actor operation. Given the elevated risk level and the domain’s active status, PhishDestroy strongly advises against interacting with live-leedge-app.pages.dev or entering any credentials on the site. Users who may have already visited the domain should immediately change passwords for any accounts that could have been compromised and enable multi-factor authentication where possible. Organizations are recommended to block the IP address 188.114.97.3 and monitor network traffic for connections to this domain. For further analysis and mitigation strategies, refer to the full report.