home-ledgielive[.]pages[.]dev

PhishDestroy identifies home-ledgielive.pages.dev as an active social engineering domain posing an elevated threat to unsuspecting users. This domain leverages Cloudflare Pages to host a deceptive interface, likely mimicking legitimate services to harvest credentials or sensitive information. The infrastructure relies on IP 188.114.97.3, with SSL certification from Google Trust Services—a tactic commonly abused to establish false trust. Visitors risk credential theft, financial loss, or malware exposure if they engage with the site’s prompts or downloads.

This domain carries concerning metrics that validate its malicious intent. Only 1 of 95 VirusTotal security vendors flagged home-ledgielive.pages.dev at the time of analysis, indicating poor detection coverage despite its harmful nature. Registered through Cloudflare, Inc., the domain exploits the provider’s trustworthy reputation to evade scrutiny. Additionally, Google Safe Browsing’s SOCIAL_ENGINEERING classification underscores its focus on manipulating users into divulging personal data under false pretenses. These indicators collectively point to a sophisticated, low-profile attack platform designed to blend into benign web ecosystems.

Users who have visited home-ledgielive.pages.dev should immediately cease any interaction with the site and disconnect from untrusted networks. Scan all devices with updated antivirus software, focusing on signs of credential harvesting or malware droppers. If any credentials were entered, reset passwords for potentially compromised accounts immediately and enable multi-factor authentication where possible. Report the domain to your organization’s SOC or directly to Google Safe Browsing to aid in broader threat mitigation. Monitor financial accounts closely for signs of unauthorized activity, as this domain may be part of a larger campaign targeting unsuspecting victims.