home-ledgrr-io-livee-login[.]pages[.]dev

PhishDestroy identifies home-ledgrr-io-livee-login.pages.dev as an active credential theft domain operating under Cloudflare Pages. This domain is designed to impersonate a legitimate login interface to harvest user credentials under false pretenses. The threat is currently classified as elevated due to its active status and deceptive tactics aimed at tricking users into surrendering sensitive authentication details.

This domain was flagged by 2 of 95 VirusTotal security vendors, indicating limited but notable detection coverage. It is registered through Cloudflare, Inc., resolving to IP address 172.66.47.126. The domain utilizes a Google Trust Services SSL certificate, which may enhance its appearance of legitimacy. Despite this, the low VirusTotal detection rate suggests a recent or stealthy deployment, potentially exploiting trust in Cloudflare’s infrastructure to evade scrutiny. The unique seed identifier 77b22f confirms its association with a broader pattern of credential harvesting campaigns targeting unsuspecting users.

Given the active status of this domain and its clear intent to deceive users into credential theft, immediate action is recommended. Users should avoid interacting with this domain entirely and report it to relevant authorities or security platforms. Organizations are advised to update threat intelligence feeds to include this domain and block access at the network perimeter. Additionally, users should verify the authenticity of login pages by cross-referencing domain names and ensuring HTTPS certificates align with known legitimate sources. Proactive monitoring of similar domains registered under Cloudflare Pages is encouraged to mitigate further exposure to credential theft campaigns.