homes-ledgr-engs[.]pages[.]dev

PhishDestroy identifies homes-ledgr-engs.pages.dev as an active credential theft domain currently under investigation. The domain poses a HIGH risk due to its clear intent to harvest user credentials under false pretenses, likely mimicking legitimate service interfaces. Immediate precaution is advised. homes-ledgr-engs.pages.dev resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc. VirusTotal scans show 4/95 security engines have flagged the domain to date, indicating low detection coverage despite suspicious behavior. The domain operates under an SSL certificate issued by Google Trust Services, which may lend it superficial credibility. Additional risk factors include its use of a Pages.dev subdomain, a platform historically exploited for phishing due to its accessibility and low barrier to deployment. Technical indicators reveal a lack of robust security monitoring: no detections on VirusTotal, minimal domain age visibility due to Cloudflare’s privacy protections, and reliance on a reputable SSL issuer to obscure malicious intent. Threat intelligence suggests this domain may be part of a broader campaign targeting users through fake login portals or service impersonation. To mitigate risk, users should avoid interacting with homes-ledgr-engs.pages.dev and report the domain to their security teams or browser providers. Organizations are advised to update DNS blocklists and inspect network traffic for connections to 188.114.96.3. Security solutions should flag domains with similar naming patterns (e.g., hyphenated service impersonations) as high-confidence threats until further evidence of clean-up is verified.