ldgr--live[.]pages[.]dev

PhishDestroy identifies ldgr--live.pages.dev as a generic phishing domain currently under active investigation for fraudulent lead generation impersonation. This domain, registered under Cloudflare, Inc., is not yet flagged by any of the 95 VirusTotal vendors as of the latest scan. At this stage, its SSL certificate is issued by Google Trust Services, and it resolves to IP address 188.114.97.3, indicating infrastructure leveraging legitimate providers to evade detection. This domain shows no immediate recognition on VirusTotal, with 1 out of 95 security vendors detecting malicious activity as of the most recent scan. It is registered through Cloudflare, Inc., a common registrar for both legitimate and malicious content, and currently resolves to IP 188.114.97.3. While this IP falls within Cloudflare’s known infrastructure range, the lack of detections suggests either a recently activated campaign or deliberate obfuscation through Cloudflare’s proxy services. The domain uses a Google-issued SSL certificate, which enhances its appearance of legitimacy to potential victims. As of now, ldgr--live.pages.dev remains active and unblocked across major threat intelligence platforms. Given the absence of detections and the use of trusted infrastructure, users are strongly advised to refrain from visiting this domain or interacting with any services it offers. Security teams should flag this domain in local blocklists and monitor for related campaigns due to its potential to harvest user credentials or sensitive data under the guise of lead generation. Immediate investigation by threat researchers is recommended to assess its full operational scope and intent.