# project-ledgrwalite-bing.pages.dev — SUSPICIOUS > PhishDestroy identifies project-ledgrwalite-bing.pages.dev as a live credential theft site impersonating Bing search services. ## Summary PhishDestroy identifies project-ledgrwalite-bing.pages.dev as a live credential theft page masquerading as Bing search infrastructure. The threat is currently active and leverages a deceptive Pages.dev subdomain to harvest user credentials under false pretenses. The domain was detected hosting a malicious login interface designed to trick visitors into surrendering sensitive authentication details, posing a direct risk to enterprise and consumer accounts alike. This domain resolves to IP address 188.114.97.3 and is registered via Cloudflare, Inc. VirusTotal analysis confirms detection by 2 of 95 security vendors, with a low prevalence score. The site operates under an SSL certificate issued by Google Trust Services, exploiting legitimate certificate authority trust to enhance credibility. Although no blocklist presence is reported at this time, the low detection rate underscores the importance of proactive monitoring and user awareness. The threat remains active and should be treated with elevated urgency. Organizations are advised to block the domain at the network perimeter and update firewall rules to prevent outbound connections. Users should be warned against interacting with the site and instructed to verify URLs via official channels. Enable multi-factor authentication across all services to mitigate credential loss. Reports of access must be escalated for immediate credential rotation and forensic analysis. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 188.114.97.3 ## Detection Status - VirusTotal: 2 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/19a3cf0b-e0c1-432c-9262-f48e78ea7b49 - PhishDestroy: https://phishdestroy.io/domain/project-ledgrwalite-bing.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/project-ledgrwalite-bing.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/project-ledgrwalite-bing.pages.dev/ Last updated: 2026-03-22