io-ledegr[.]pages[.]dev

PhishDestroy identifies io-ledegr.pages.dev as an active generic phishing domain leveraging Cloudflare Pages for hosting. This infrastructure has been linked to deceptive campaigns designed to harvest credentials or personal data under false pretenses. The threat remains under investigation, but the use of Cloudflare’s Pages service allows rapid domain rotation, complicating traditional takedown efforts. No specific brand or drainer kit has been publicly associated with this domain yet, suggesting it may either be a template or part of a broader campaign with adaptable payloads. This domain resolves to IP address 172.66.44.250 and is registered through Cloudflare, Inc. The domain holds a valid SSL certificate issued by Google Trust Services, which may lend false legitimacy to potential victims. VirusTotal currently shows 0/95 detections, indicating no immediate blacklisting despite its malicious activity. The domain’s Cloudflare Pages origin and HTTPS certificate complicate detection for inexperienced users, while its relative novelty (creation date not specified) indicates it has not been widely observed or blocked by security vendors. Current status for io-ledegr.pages.dev remains active, with no known takedown or blocklist inclusion reported. Users are advised not to access the site and to report it through their browser or security tools. The remaining risk is considered moderate due to its active state, undetected status on VirusTotal, and use of reputable hosting/CDN services. Security teams should monitor for associated indicators and consider network-level blocking of the IP 172.66.44.250 as a precaution.