join-ledrg-live[.]pages[.]dev

PhishDestroy identifies join-ledrg-live.pages.dev as an active credential-phishing domain masquerading as a legitimate login portal. This fraudulent site attempts to harvest user credentials by impersonating a login interface, likely targeting unsuspecting victims through phishing emails or social engineering tactics. The threat actors behind this domain are exploiting Cloudflare Pages to host their phishing infrastructure, leveraging Cloudflare’s reputation and SSL certificate by Google Trust Services to appear legitimate. Users interacting with this domain risk exposing their usernames, passwords, or other sensitive information directly to cybercriminals. Analysis of join-ledrg-live.pages.dev reveals troubling indicators of malicious intent. This domain shows zero detections out of 95 VirusTotal scans, suggesting it has evaded detection by antivirus engines despite its phishing operations. The domain resolves to IP address 172.66.44.89 and is registered through Cloudflare, Inc., which enables threat actors to quickly deploy and modify phishing infrastructure. Notably, this domain remains unlisted on any major blocklists, increasing its potential to deceive users. The unique seed 1995fa uniquely identifies this phishing campaign, which appears to be freshly launched and actively evolving. Users who visited join-ledrg-live.pages.dev should immediately assess their exposure. If you entered any credentials on this site, change your passwords immediately and enable multi-factor authentication where available. Scan your devices for malware using reputable security software and monitor your accounts for suspicious activity. Report this domain to your email provider or browser security team to help prevent others from falling victim. Avoid interacting with this domain entirely, as it poses a clear threat to your digital security.