ldegrlive[.]pages[.]dev

PhishDestroy identifies this domain as an active phishing probe aimed at harvesting Google account credentials. ldegrlive.pages.dev is presented through a Cloudflare Workers URL that leverages Google Trust Services for an HTTPS padlock, giving it the false appearance of legitimacy. The site resolves to IP 172.66.47.72 and currently remains undetected by every scanner in VirusTotal with a clean score of 0 detections out of 95 engines. This domain was flagged by PhishDestroy after automated analysis revealed a generic credential-stealing form masquerading as a Google login page. Threat intelligence shows 0 VirusTotal detections as of the seed 6b9538 analysis cycle, indicating it has evaded signature-based detection thus far. The domain was registered through Cloudflare, Inc. and is delivered via Cloudflare Workers, a serverless platform that can host short-lived, malicious content under a trusted Google TLS certificate. These characteristics suggest the operators prioritize speed and stealth over long-term infrastructure reliability. If you visited ldegrlive.pages.dev, assume your credentials may have been compromised. Immediately change the password tied to any account you entered, enable two-factor authentication if available, and review your account activity for unauthorized access. Report the domain to your security team or forward the URL to PhishDestroy for de-listing. Avoid reusing passwords across services and consider using a password manager to detect look-alike domains in the future.