en-live-download-ldgr[.]pages[.]dev

This domain, en-live-download-ldgr.pages.dev, is flagged as a credential theft phishing site. Analysis indicates no direct association with a specific brand or cryptocurrency drainer kit, but the infrastructure and page title suggest an attempt to harvest login credentials or sensitive user data. The site was hosted under a Cloudflare Pages subdomain, a common tactic to leverage legitimate infrastructure for malicious purposes. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.66.47.82, registered through Cloudflare, Inc. on March 31, 2026, an anomalous future date likely indicative of automated or falsified registration. The SSL certificate is issued by Google Trust Services, providing a veneer of legitimacy. VirusTotal reports 0/95 detections, meaning no engines currently flag it as malicious, though it appears on one security blocklist. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification. The domain is currently offline, likely taken down following detection by security systems. However, residual risk remains due to the potential for rapid redeployment under a new subdomain or domain. Users who interacted with this site should immediately rotate credentials, particularly if login prompts were encountered. Organizations are advised to monitor for related indicators, including the IP address 172.66.47.82 and the anomalous registration date, which may signal additional malicious infrastructure.