live-x-ldgerlogn[.]pages[.]dev

PhishDestroy flags live-x-ldgerlogn.pages.dev as an active credential phishing domain designed to steal financial login credentials. The threat is currently under investigation due to recent discovery, but the page’s structure and branding suggest a targeted campaign against banking or investment platform users. Unlike generic phishing pages, this scam specifically mimics the login interface of legitimate financial services to harvest usernames and passwords. This domain resolves to IP 172.66.44.217 and uses a Google Trust Services SSL certificate, which may lend false legitimacy. Registered through Cloudflare, Inc., the domain shows no detections on VirusTotal (8/95) and has not yet been added to public blocklists, indicating a window of active operation. The use of Cloudflare’s infrastructure and Google’s SSL certificate highlights a deliberate attempt to bypass traditional security filters by exploiting trusted service providers. To mitigate exposure to this scam, avoid clicking links from unsolicited emails or messages claiming to require urgent login. Verify any financial login page by manually entering the official URL or using a bookmark. If you entered credentials, immediately change your password on the legitimate platform and enable multi-factor authentication. Report the domain to your IT team or PhishDestroy to aid in blocking efforts.