ledgrr-live-desk-io[.]pages[.]dev

PhishDestroy identifies ledgrr-live-desk-io.pages.dev as an active credential harvesting fraud operating under a phishing threat vector. The domain leverages a deceptive pages.dev subdomain to impersonate a legitimate desk service interface, likely targeting corporate credentials. Current status remains active with under-investigation classification, indicating the need for immediate scrutiny due to the high potential for user deception. ledgrr-live-desk-io.pages.dev was registered through Cloudflare, Inc. and resolves to IP 172.66.47.190. The domain currently shows 0 detections out of 95 VirusTotal vendor engines, despite its malicious intent. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. No historical blocklist entries or known takedown actions were recorded at the time of analysis. PhishDestroy recommends immediate blocking of ledgrr-live-desk-io.pages.dev at the network perimeter using domain-based and IP-based indicators. Organizations should monitor DNS queries and HTTP/S traffic for connections to 172.66.47.190. Users must avoid accessing the domain or submitting credentials. Administrators should update firewall rules and endpoint protection tools to quarantine this domain. Continuous monitoring is advised as the domain remains active and undetected by most security vendors.