ledgrr-liiv-desktop[.]pages[.]dev

PhishDestroy identifies ledgrr-liiv-desktop.pages.dev as an active phishing site designed to trick users into surrendering sensitive information. This domain leverages Cloudflare’s infrastructure for hosting and Google Trust Services for SSL certificates, creating a false sense of legitimacy. The site resolves to IP address 172.66.44.176 and is currently flagged by 10 out of 95 VirusTotal security vendors, indicating elevated risk and active malicious activity.

This domain was flagged through automated threat intelligence gathering and sandbox analysis. It was registered through Cloudflare, Inc., which allows rapid domain provisioning often exploited by threat actors. The SSL certificate issued by Google Trust Services enhances its credibility, tricking users into believing the site is safe. VirusTotal’s detection rate of 10/95 highlights consistent but not universal recognition of the threat, suggesting that some security tools may still miss its malicious nature due to evolving obfuscation techniques. Despite its professional appearance, the site serves as a gateway for credential harvesting and potential malware distribution.

If you have visited ledgrr-liiv-desktop.pages.dev, avoid entering any personal or login information. Immediately inspect your device for unusual activity, such as unauthorized logins or unfamiliar processes. Reset passwords for any accounts potentially exposed and enable multi-factor authentication where available. Report the domain to your security team or via your organization’s phishing reporting channel. Consider scanning your device with updated antivirus software to detect any residual threats. Always verify URLs carefully and prioritize accessing services through official, bookmarked links or trusted domains.