ledhjgfdh-sdfjghd[.]pages[.]dev

The domain ledhjgfdh-sdfjghd.pages.dev has been identified as a high-risk source for generic phishing. No specific brand or drainer kit has been associated with this domain. The threat posed by this domain is significant, as it is actively used to host phishing content that can lead to unauthorized access to user credentials and personal information.

Technical analysis reveals that the domain is registered through Cloudflare, Inc. and resolves to the IP address 188.114.96.3, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain has been flagged by 6 out of 95 security vendors on VirusTotal, and it appears on 2 security blocklists. Additionally, the SSL certificate is issued by Google Trust Services, providing a false sense of security to potential victims. The domain does not have any notable presence in Google Safe Browsing (GSB) lists, indicating that it may be relatively new or has not been reported extensively yet.

As of the latest analysis, the domain ledhjgfdh-sdfjghd.pages.dev is still active and operational. It is blocked by PhishDestroy and OpenPhish, which are known security blocklists. However, the remaining risk remains high due to the low detection rate by security vendors and the presence of a valid SSL certificate. Organizations and individuals are advised to implement additional security measures, such as real-time URL filtering and user education on phishing threats, to mitigate the risk of compromise.