ledze-r-live-en-us[.]pages[.]dev

PhishDestroy identifies ledze-r-live-en-us.pages.dev as a credential theft phishing domain actively targeting users with Microsoft-branded login spoofing. The page mimics official Microsoft login interfaces to trick victims into submitting credentials, which are then harvested by attackers for account takeover or further exploitation.

This domain was flagged with zero detections on VirusTotal (8/95 scanners), registered via Cloudflare on Google Trust Services infrastructure resolving to IP 188.114.96.3. The active status and lack of detections indicate a recently deployed campaign likely leveraging Cloudflare Pages for evasion and rapid rotation.

If you visited this domain, immediately change passwords for any accounts exposed via this page and enable multi-factor authentication. Scan your device for malware using reputable security software and monitor accounts for suspicious activity. Avoid re-engaging with the domain, as it remains under investigation and may deploy additional payloads or evolve to evade detection.