# ldgres-lives-oi.pages.dev — SUSPICIOUS

> PhishDestroy identifies ldgres-lives-oi.pages.dev as a live credential harvesting page mimicking a login portal. Resolves to 172.66.47.

## Summary
PhishDestroy has flagged ldgres-lives-oi.pages.dev as an active credential-theft page under live investigation. This Cloudflare Pages domain is currently serving a spoofed login interface designed to harvest user credentials under the guise of a legitimate service. The immediate risk is high due to its active status and the absence of current detection coverage, creating a window for widespread exploitation.  This domain was registered via Cloudflare, Inc., resolving to IP address 172.66.47.163 and hosting behind a Google Trust Services SSL certificate. It currently shows 0 detections out of 95 engines on VirusTotal, indicating a low initial detection footprint. The domain’s structure (ldgres-lives-oi.pages.dev) suggests a deliberate attempt to mimic a trusted platform, likely targeting users through deceptive notifications or compromised links. The seed identifier 8a3664 confirms this campaign is part of a tracked, evolving threat operation.  To mitigate exposure, users should immediately block access to ldgres-lives-oi.pages.dev and report it to their network or email security teams. Enterprises are advised to inspect DNS logs for recent resolutions to 172.66.47.163 and scan for inbound emails referencing this domain. If credentials were entered, users must rotate passwords immediately and enable multi-factor authentication. Security teams should monitor for follow-on phishing campaigns leveraging harvested credentials, as this domain’s low detection rate suggests rapid evolution and likely redistribution across other platforms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.163

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/ldgres-lives-oi.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/ldgres-lives-oi.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ldgres-lives-oi.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ldgres-lives-oi.pages.dev/
Last updated: 2026-04-03