learn-start-lidgrs[.]pages[.]dev

PhishDestroy identifies learn-start-lidgrs.pages.dev as an active credential theft site designed to harvest user login details under the guise of a legitimate service. This subdomain is hosted on Cloudflare Pages infrastructure and resolves to IP 172.66.44.202, using a Google Trust Services SSL certificate to appear authentic. The domain is currently undetected by 95 VirusTotal scanners, indicating it has evaded initial detection mechanisms despite its malicious intent. This domain was flagged with 0 detections out of 95 scanners on VirusTotal, confirming it remains under the radar while actively targeting users. It is registered through Cloudflare, Inc., leveraging the company’s legitimate Pages service to host deceptive content. While the exact registration date is not publicly disclosed, the use of a Google Trust Services certificate and Cloudflare Pages suggests recent deployment aimed at exploiting trust in well-known platforms. If you visited learn-start-lidgrs.pages.dev, immediately check any accounts where you may have entered credentials. Do not use saved passwords or autofill features on this site. Run a full antivirus scan and monitor accounts for suspicious activity. Report the domain to your organization’s security team or to PhishDestroy for further analysis. Avoid clicking any links from unsolicited emails or messages leading to this domain.