# ledhgb-vbgsgjsjd.pages.dev — MALICIOUS

> ledhgb-vbgsgjsjd.pages.dev is a phishing site hosted on Cloudflare with a Let's Encrypt SSL certificate, flagged by 5 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies ledhgb-vbgsgjsjd.pages.dev as an active phishing domain designed to steal login credentials or sensitive personal information. This site mimics legitimate login portals to trick users into submitting their credentials, which attackers then harvest for fraudulent use. The page appears to be part of a broader campaign targeting unsuspecting victims through deceptive links, often distributed via email, social media, or messaging platforms. Once credentials are entered, attackers can gain unauthorized access to accounts, leading to identity theft, financial fraud, or further exploitation of connected services.  This domain was flagged by PhishDestroy due to its elevated risk profile and confirmed malicious activity. The site is registered through Cloudflare, Inc., a common tactic to obscure hosting details, and operates with a Let's Encrypt SSL certificate to appear legitimate. VirusTotal analysis reveals that 5 out of 95 security vendors have flagged this domain as malicious, indicating a significant but not universal consensus on its threat level. The domain resolves to IP address 188.114.96.3, which has been linked to other known phishing infrastructure. While the exact creation date of this domain is not publicly available, its use of Cloudflare's Pages.dev service suggests it was likely deployed recently to evade detection.  If you have visited ledhgb-vbgsgjsjd.pages.dev, immediately check any accounts where you may have entered login credentials or personal information. Change passwords for those accounts and enable multi-factor authentication where possible. Scan your device for malware using reputable antivirus software, as clicking on phishing links can sometimes lead to drive-by downloads. Report the domain to your email provider or browser if you encountered it through a suspicious link. Avoid interacting with this site entirely, and do not download any files or software from it. For further assistance, consult your organization's IT security team or file a report with a trusted cybersecurity authority.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/ledhgb-vbgsgjsjd.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/ledhgb-vbgsgjsjd.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledhgb-vbgsgjsjd.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledhgb-vbgsgjsjd.pages.dev/
Last updated: 2026-04-09