en-desktop-ledgre-intro[.]pages[.]dev

PhishDestroy identifies en-desktop-ledgre-intro.pages.dev as a malicious redirect page posing as a legitimate desktop introduction portal. This site is actively distributing a phishing campaign designed to harvest user credentials or deliver malware under the guise of a software update prompt. Visitors are immediately redirected to secondary domains controlled by threat actors, where fake system alerts trick users into downloading malicious executables or entering sensitive information into spoofed login forms. The campaign relies on social engineering to exploit urgency, often mimicking Windows or macOS update notifications to bypass user suspicion. Avoid all interaction with this domain.

This domain was flagged due to multiple security indicators, including 0 detections from VirusTotal’s 95-scanner network, despite active phishing distribution. Registered through Cloudflare, Inc., the site leverages Google Trust Services’ SSL certificate to appear legitimate, resolving to IP 172.66.44.55. The threat remains under investigation but is confirmed active, with no blocklist entries at the time of analysis. Users should treat this domain as hostile and avoid all engagement.

If you visited en-desktop-ledgre-intro.pages.dev, immediately run a full antivirus scan and check for unauthorized logins or suspicious processes. Disable browser extensions temporarily to rule out injected scripts, and avoid re-entering credentials on any pop-up prompts. Report the domain to your antivirus provider and consider changing passwords for critical accounts. Monitor financial statements for anomalies and enable two-factor authentication where possible. Cloudflare’s infrastructure may delay takedowns, so treat this site as a confirmed threat regardless of current accessibility.