lej-er-live[.]pages[.]dev

PhishDestroy identifies lej-er-live.pages.dev as a domain involved in generic phishing activities. Although no specific brand impersonation or drainer kit has been linked yet, the domain exhibits characteristics common to phishing schemes designed to deceive users into divulging sensitive information. The generic phishing threat type suggests a broad attempt to capture credentials or personal data without targeting a particular organization.

Technical indicators show that lej-er-live.pages.dev currently has a VirusTotal detection score of 3 out of 95, indicating it has not yet been flagged by antivirus or URL scanning engines. The domain resolves to IP address 188.114.97.3 and is registered through Cloudflare, Inc., a common registrar for both legitimate and malicious sites due to its content delivery network services. The SSL certificate in use is issued by Google Trust Services, which may lend a false sense of security to users. There is no available data on the domain's creation date or any Google Safe Browsing (GSB) status, and no blocklist counts have been reported at this time.

Currently, lej-er-live.pages.dev remains active and under investigation, with its risk level classified as under_investigation. Security teams and users should exercise caution, avoid interacting with the domain, and monitor for updates from threat intelligence sources. Organizations should consider blocking the domain at network perimeters as a precaution until further analysis confirms its status. Continued surveillance is necessary due to the potential for this domain to begin active phishing campaigns, exploiting its legitimate SSL certificate to trick victims.