live-ledge-aurth[.]pages[.]dev

The domain live-ledge-aurth.pages.dev has been identified as a credential theft phishing site. The site does not impersonate a specific brand or utilize a crypto drainer kit, but it is designed to steal user credentials, posing a significant risk to users who interact with it.

Infrastructure analysis reveals that the domain is flagged by 11 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.96.3. It was created on April 08, 2026. The site is currently listed as a suspected phishing site on Cloudflare, and it has a Gridinsoft trust score of 0/100, reflecting a complete lack of trust. Additionally, the domain appears on one security blocklist, further corroborating its malicious nature.

The current status of live-ledge-aurth.pages.dev is offline, which suggests that it has been taken down by either the registrar or security agencies. However, the domain may still pose a risk if it is reactivated or if users have already been compromised. It is recommended that any user who may have interacted with this site change their passwords and enable multi-factor authentication on all affected accounts. Security teams should continue to monitor for any signs of reactivation and take proactive measures to block and report the domain to relevant authorities.