ldegsar-live[.]pages[.]dev

PhishDestroy identifies ldeghar-live.pages.dev as a fraudulent login portal designed to harvest user credentials. This domain mimics a legitimate service, likely targeting unsuspecting victims with deceptive login pages. Security teams have flagged this as an active phishing threat under investigation, with evidence pointing to credential theft as the primary objective. ldeghar-live.pages.dev resolves to IP 188.114.97.3, registered through Cloudflare, Inc., and secured with a Google Trust Services SSL certificate. VirusTotal currently shows 7/95 detections, meaning no antivirus engines have flagged it yet, but this low detection rate is common for newly deployed phishing domains. The infrastructure (Cloudflare proxying and Google SSL) is often abused by threat actors to evade initial detection while maintaining credibility. Given the lack of blocklist entries at this stage, immediate action is critical to prevent further victimization. Users who visited this domain should assume their credentials were compromised if they entered login details. Immediately change passwords for the account associated with this phishing attempt and enable multi-factor authentication (MFA) where available. Report the domain to your IT security team or use tools like Google Safe Browsing to help block future access. Avoid clicking any links from this domain and monitor accounts for unusual activity. Proactive blocking of 188.114.97.3 in firewall rules is recommended to prevent additional access.