live-ledge-app-eng-dim[.]pages[.]dev

PhishDestroy identifies the active phishing domain live-ledge-app-eng-dim.pages.dev, which is impersonating a live streaming application service. The campaign is currently under investigation with a generic phishing threat classification. This domain leverages Cloudflare Pages to host a fraudulent interface mimicking legitimate streaming platforms, aiming to deceive users into entering credentials or payment data.

This domain was flagged by 1 of 95 VirusTotal vendors as of the latest scan, indicating no immediate detection by antivirus engines despite suspicious hosting infrastructure. The domain is registered through Cloudflare, Inc., resolves to IP address 188.114.97.3, and holds a Google Trust Services SSL certificate, which may lend false legitimacy to unsuspecting users. The campaign shows active deployment, with infrastructure hosted on Cloudflare Pages to obscure true origins and evade takedown efforts.

As of current intelligence, the risk level remains under investigation, but the absence of detection on VirusTotal highlights a critical gap in early warning systems. Given the domain's use of legitimate cloud hosting services and a trusted SSL provider, end users may overlook red flags, increasing the likelihood of successful deception. Organisations are advised to block the domain at the network perimeter, monitor for related artifacts in DNS logs, and educate users on verifying streaming platform URLs. Additionally, reporting this domain to threat intelligence platforms and requesting takedown via Cloudflare’s abuse channels is strongly recommended to mitigate further exposure.