ldegr-live-web[.]pages[.]dev

PhishDestroy identifies ldegr-live-web.pages.dev as an active credential stealer domain impersonating legitimate login interfaces to harvest user credentials. This domain has been evaluated at an elevated risk level due to its confirmed malicious activity and operational status. Users are strongly advised to avoid interaction and verify any potential exposures through PhishDestroy's threat intelligence platform.

This domain resolves to IP address 172.66.45.11 and is registered through Cloudflare, Inc., utilizing Google Trust Services for SSL certificates which may contribute to its deceptive legitimacy. VirusTotal analysis shows this domain flagged as malicious by 1 out of 95 security vendors, a critical indicator of its covert threat potential. The use of Cloudflare's infrastructure combined with a Google-issued SSL certificate demonstrates advanced evasion techniques commonly employed by credential theft campaigns. Despite its professional appearance, the domain's low detection rate and connection to known phishing infrastructure warrant immediate caution.

The credential stealer deployed on this domain poses significant risks to users entering login credentials, as captured data may be exfiltrated to attacker-controlled servers. Immediate mitigation involves avoiding any form of interaction with this domain, including clicking links or providing any personal information. Users should verify the legitimacy of websites by cross-referencing official domains and utilize PhishDestroy's real-time verification tools before entering credentials. Organizations are advised to implement DNS filtering to block this domain at the network perimeter and educate users about the risks of credential harvesting attacks through cloud-hosted phishing pages.