# lives-ledgr-en.pages.dev — SUSPICIOUS

> lives-ledgr-en.pages.dev is a Google Sites-hosted phishing page stealing Google account credentials via a fake ledger login.

## Summary
PhishDestroy identifies lives-ledgr-en.pages.dev as an active credential theft page impersonating a Google Docs ledger template to harvest Google account credentials. This domain is deployed on Cloudflare Pages using a Google Trust Services SSL certificate to enhance authenticity, leveraging the trusted Google ecosystem to deceive users into entering their login details. The scam specifically targets users searching for financial or ledger templates, redirecting them through a spoofed login interface designed to capture email and password combinations without suspicion.  

This domain was flagged by 1 out of 95 VirusTotal security vendors and resolves to IP 172.66.45.33, registered through Cloudflare, Inc. No known brand or drainer kit associations were identified in this analysis. The domain is hosted on Cloudflare Pages, a legitimate service often abused for phishing due to its free tier and integration with Google Trust Services for SSL certificates. Given the low VirusTotal detection rate, this domain may evade some automated detection systems, increasing its potential for successful credential harvesting.  

The current status of lives-ledgr-en.pages.dev is active, with no observed takedown measures as of the latest analysis. Users are advised to block this domain at the network and endpoint levels to prevent access. The risk level remains elevated due to the credential theft objective and the domain's persistent availability. Immediate action includes reporting this domain to browser blocklists and security vendors to enhance collective defense. Users should verify the legitimacy of any Google Docs template by checking the official Google Docs template gallery and enabling multi-factor authentication on their accounts to mitigate the impact of credential theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.45.33

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/159c0b14-0e39-4715-96b9-6f73bbcffdfb
- PhishDestroy: https://phishdestroy.io/domain/lives-ledgr-en.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/lives-ledgr-en.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/lives-ledgr-en.pages.dev/
Last updated: 2026-03-22