pages-ledgrliv-en-app[.]pages[.]dev

PhishDestroy identifies pages-ledgrliv-en-app.pages.dev as an active generic phishing domain posing a high risk of credential theft through a fake login interface, likely targeting cryptocurrency users. The threat type has been confirmed as a credential harvesting attack designed to drain digital assets from unsuspecting victims.

This domain was flagged by PhishDestroy with a risk level marked as under_investigation and remains active in the threat database. It resolves to IP address 172.66.44.161, registered through Cloudflare, Inc. The domain currently shows zero detections out of 95 on VirusTotal and utilizes a Google Trust Services SSL certificate. Despite no current blocklist presence, the combination of low detection rates and active status warrants immediate scrutiny.

To mitigate exposure to this fake login crypto drainer, users are strongly advised to avoid interacting with pages-ledgrliv-en-app.pages.dev or entering any credentials. If you suspect interaction, revoke any exposed API keys or wallet permissions immediately. Verify unknown domains using PhishDestroy’s real-time lookup before proceeding. Report this domain to PhishDestroy’s crawlers via submission@phishdestroy.net to aid in ongoing threat analysis.