hub-ldgrlivb[.]pages[.]dev

This domain is flagged as an elevated-risk credential theft operation targeting user login credentials through deceptive landing pages. Analysis indicates the infrastructure was designed to harvest sensitive account details, likely for subsequent unauthorized access or financial fraud. The threat type aligns with known patterns of credential harvesting, where victims are lured into entering usernames, passwords, or multi-factor authentication codes under false pretenses. Infrastructure analysis reveals the domain hub-ldgrlivb.pages.dev was registered on March 27, 2026, through a hosting service that provides automated deployment for static sites. It resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, a common tactic to appear legitimate. The domain is currently offline but was previously detected by 7 out of 95 security vendors on a malware analysis platform, indicating moderate consensus on its malicious nature. It appears on one security blocklist, and independent trust scoring systems assign it a 0/100 rating, reflecting high confidence in its classification as harmful. The page title, 'Suspected phishing site | Cloudflare,' further corroborates its detection by automated security mechanisms. Mitigation steps for organizations and individuals potentially exposed to this threat include immediate credential rotation for any accounts accessed via this domain. Users should enable multi-factor authentication on all critical services to reduce the impact of stolen credentials. Network administrators are advised to block the domain and its resolving IP (188.114.96.3) at the perimeter to prevent further access attempts. Logs should be reviewed for connections to hub-ldgrlivb.pages.dev or the associated IP to identify compromised devices. Given the domain's registration under a hosting service known for rapid deployment, monitoring for similar patterns (e.g., subdomains under *.pages.dev) is recommended to preemptively identify related threats.