# connect-leadr-live-download-us.pages.dev — SUSPICIOUS

> Domain connect-leadr-live-download-us.pages.dev is a live phishing page impersonating a lead download service.

## Summary
PhishDestroy identifies the domain connect-leadr-live-download-us.pages.dev as an active generic phishing page posing as a legitimate lead download service. This domain resolves to IP 188.114.97.3 and is registered through Cloudflare, Inc., with a Google Trust Services SSL certificate in use. The domain has been flagged by only 2 out of 95 security vendors on VirusTotal, indicating a low but present detection rate.  This domain was flagged as part of an elevated-risk phishing campaign, suggesting it may be used to distribute malware, harvest credentials, or deceive users into downloading malicious payloads under the guise of a lead management tool. The use of Cloudflare's pages.dev subdomain and a Google-issued SSL certificate is a common tactic to lend false legitimacy to phishing infrastructure. Despite low detection on VirusTotal, the domain's active status and specific targeting of lead-related themes warrant caution.  Users who have visited this domain or interacted with any links should immediately disconnect from the internet, scan their devices for malware, and change passwords for accounts accessed following the visit. Report the domain to your IT security team or the relevant abuse contacts for Cloudflare and Google Trust Services. Exercise heightened scrutiny for unsolicited emails or messages referencing lead downloads, as this domain is part of an active and evolving threat campaign.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3af57e68-508a-4b96-bf4f-9c3bc46974ee
- PhishDestroy: https://phishdestroy.io/domain/connect-leadr-live-download-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/connect-leadr-live-download-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/connect-leadr-live-download-us.pages.dev/
Last updated: 2026-03-21