app-lad-gar-live[.]pages[.]dev

PhishDestroy identifies app-lad-gar-live.pages.dev as a Google Docs-themed phishing domain actively distributing malicious content under the guise of a legitimate document-sharing service. This domain mimics Google Docs' Pages.dev hosting platform to deceive users into entering sensitive credentials or downloading malware-infected files. The threat actor leverages Cloudflare's infrastructure to obfuscate their true hosting location and employs a Google Trust Services SSL certificate to enhance the domain's perceived legitimacy, increasing the likelihood of successful deception. This tactic is particularly effective against users who prioritize visual cues over URL scrutiny, as the domain superficially resembles a trusted Google service.

Technical analysis reveals this domain resolves to IP address 188.114.97.3, which currently shows no detections across 95 VirusTotal scanners, indicating it remains under the radar of most automated threat detection systems. Registered through Cloudflare, Inc., the domain benefits from the company's reputation for fast propagation and evasion of traditional blocklists. While specific creation and blocklist data are not yet available, the combination of zero detections and active hosting suggests this threat is in its early, high-impact distribution phase. Users interacting with this domain may unknowingly expose login credentials or download malicious payloads disguised as document files.

If you visited app-lad-gar-live.pages.dev, immediately disconnect from the internet and scan all connected devices with updated antivirus software. Review account credentials for any entered on the site, using unique passwords for each service and enabling two-factor authentication where available. Report the domain to your IT security team or local cybercrime unit, and consider changing passwords for all potentially exposed accounts. For future protection, verify URLs by hovering over links before clicking, use browser extensions that flag suspicious domains, and maintain up-to-date security software. Always access Google Docs directly through google.com/docs rather than third-party hosting platforms.