desktop-ledgar[.]pages[.]dev

PhishDestroy identifies desktop-ledgar.pages.dev as a currently active credential harvesting domain under investigation for generic phishing tactics.

This domain was flagged by 0 of 95 VirusTotal vendors during automated scans, indicating it has not yet been widely recognized as malicious despite its suspicious nature. It is registered through Cloudflare, Inc., resolves to IP 172.66.45.44, and holds a valid Google Trust Services SSL certificate, which may lend a false sense of legitimacy. The absence of blocklist entries and reliance on cloud infrastructure obscure its true intent, making it a potential vector for identity theft through deceptive login portals or data collection forms.

While the immediate risk level remains under investigation due to low detection rates, the combination of cloaked registration, unverified trust certificates, and unmonitored IP reputation presents a plausible threat to unsuspecting users. PhishDestroy advises users to avoid interacting with this domain, refrain from submitting personal or login credentials, and report the site through their browser or security tools. Organizations should monitor network traffic for connections to 172.66.45.44 and consider blocking the domain at the firewall level to prevent potential data exfiltration.