connect-ldgr-live[.]pages[.]dev

PhishDestroy identifies connect-ldgr-live.pages.dev as an active credential-harvesting scam designed to steal LinkedIn login credentials. The site mimics a live dashboard, luring visitors into entering their email and password on a fake login form. Once submitted, the stolen credentials are sent to attacker-controlled servers and used for account takeovers, identity theft, and further phishing campaigns targeting the victim’s contacts. This domain was flagged by a single security vendor out of 95 on VirusTotal and resolves to IP 188.114.96.3 through Cloudflare’s proxy network. Google Trust Services issued the SSL certificate, indicating the attackers leveraged a trusted issuer to appear legitimate. While the exact registration date remains undisclosed due to Cloudflare’s privacy protections, the site has been active since at least the time of detection. If you visited connect-ldgr-live.pages.dev and entered any information, immediately change your password on all accounts that used the same credentials. Enable two-factor authentication where possible and scan your device for malware. Report the scam to LinkedIn’s phishing report page and your organization’s security team if this relates to work accounts. Do not click any further links from this domain and consider revoking any permissions it may have requested.