app-guide-leder-live-us[.]pages[.]dev

PhishDestroy identifies app-guide-leder-live-us.pages.dev as an ACTIVE phishing domain under investigation with a generic phishing threat type. This Cloudflare-hosted site (registered through Cloudflare, Inc.) currently resolves to IP 172.66.44.220 and operates under a Google Trust Services SSL certificate. VirusTotal scans show 9/95 detections as of the latest check, indicating it has evaded initial detection mechanisms. The domain’s lack of flagging on established platforms—despite its suspicious nature—suggests it may be newly deployed or employing evasion tactics to bypass security filters. This domain presents a concrete risk due to its active phishing threat classification and evasion of detection systems. Key technical indicators include registration via Cloudflare (a common tactic to obscure ownership), resolution to a known hosting IP (172.66.44.220), and the use of a legitimate SSL certificate to appear trustworthy. The 9/95 VirusTotal score highlights its ability to avoid immediate detection, while the absence of data on creation date or blocklist inclusion further underscores its potential novelty or sophistication in evasion. To mitigate risk, users should avoid interacting with app-guide-leder-live-us.pages.dev entirely, as it poses a direct phishing threat. If suspicious activity is detected, report the domain to your browser’s security team or platforms like VirusTotal for further analysis. Organizations should block the IP 172.66.44.220 at the network level to prevent access. Given its active status and evasion tactics, this domain warrants ongoing monitoring and should be treated as a high-risk threat until proven otherwise.