ladgrres-live[.]pages[.]dev

PhishDestroy identifies an active credential theft campaign targeting ladgrres-live.pages.dev, a live Cloudflare Pages domain hosting a suspected phishing page. The infrastructure appears designed to mimic legitimate login portals, raising immediate concerns for credential harvesting. No specific brand or drainer kit attribution is available at this stage; the campaign relies on generic phishing tactics to deceive users into entering sensitive information.

Technical indicators confirm high-risk attributes: VirusTotal reports 10/95 detections despite active hosting, indicating low signature coverage and potential evasion. The domain was registered via Cloudflare, Inc. and resolves to IP 188.114.96.3. The SSL certificate, issued by Google Trust Services, enhances the page's perceived legitimacy. With 10/95 blocklist detections, this domain remains unflagged across major security platforms, increasing exposure to unwary users.

The campaign is currently active, with no takedown efforts detected. PhishDestroy recommends immediate blacklisting of the domain and IP, as well as SSL certificate revocation. Remaining risk is assessed as high due to undetected status and potential for rapid user compromise. Users should avoid accessing the domain and report any observed activity to their security teams.