ldgzres-liv[.]pages[.]dev

This domain, ldgzres-liv.pages.dev, was identified as a credential harvesting phishing site designed to steal login credentials, financial details, or other sensitive information. Phishing pages hosted on this domain likely mimicked legitimate services, such as banking portals, email providers, or corporate login pages, to deceive users into entering their credentials. The site may have also distributed malware or redirected victims to additional malicious infrastructure, increasing the risk of account compromise or device infection. Analysis indicates the domain was registered through Cloudflare, Inc. on April 06, 2026, and resolved to the IP address 188.114.96.3. Despite its recent creation, the domain appeared on one security blocklist, and its page title, 'Suspected phishing site | Cloudflare,' suggests automated detection by the hosting provider. VirusTotal reported 0 out of 95 security vendors flagging the domain at the time of assessment, though this does not preclude malicious activity. The SSL certificate was issued by Google Trust Services, a common tactic to lend false legitimacy to phishing sites. Gridinsoft assigned a trust score of 0/100, further supporting its classification as high-risk. Users who visited ldgzres-liv.pages.dev or entered information on the site should take immediate action. First, disconnect the affected device from the network to prevent potential malware spread or data exfiltration. Reset passwords for any accounts accessed or entered on the site, prioritizing financial, email, and work-related credentials. Enable multi-factor authentication (MFA) where available to mitigate the risk of unauthorized access. Scan the device using updated security tools to detect and remove any malware. Monitor accounts for suspicious activity, such as unauthorized logins or transactions, and report the incident to relevant security teams or financial institutions if applicable. Avoid interacting with any communications (emails, messages, or pop-ups) linked to this domain, as they may be part of a broader phishing campaign.