ledgr-lv-io[.]pages[.]dev

PhishDestroy identifies ledgr-lv-io.pages.dev as a newly active credential-harvesting page impersonating a user login portal. Acting as a clone of a legitimate service, it lures visitors into entering their username and password, which are then exfiltrated to attacker-controlled servers. The site leverages Cloudflare Pages hosting and resolves to IP 188.114.97.3, making it appear benign while actively stealing sensitive data. This domain was flagged as a generic phishing page under investigation and was registered through Cloudflare, Inc. Security scans show 0 detections out of 95 on VirusTotal, indicating it has not yet been widely blacklisted despite its malicious intent. Its current online status and infrastructure choices suggest ongoing deployment, with potential for rapid expansion. If you visited ledgr-lv-io.pages.dev, assume your credentials may have been compromised. Immediately change passwords for accounts potentially exposed and enable multi-factor authentication. Scan your devices with updated antivirus software, monitor accounts for unauthorized access, and report the domain to your security team or relevant platform. Avoid any interaction with this domain and treat all associated login prompts as untrusted.