lodgr-live[.]pages[.]dev

The domain lodgr-live.pages.dev has been identified as a credential theft phishing site targeting users through deceptive login interfaces. Analysis indicates the domain is currently offline, though prior activity involved harvesting authentication credentials via fraudulent web forms. No specific brand impersonation has been confirmed, but the site follows common credential theft patterns observed in similar campaigns. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 06, 2026, resolving to the IP address 172.66.47.15. The SSL certificate is issued by Google Trust Services, a common feature in phishing domains leveraging legitimate certificate authorities. Detection metrics show 0 detections out of 95 VirusTotal vendors, though it appears on 1 security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, reinforcing its malicious classification. The page title, 'Suspected phishing site | Cloudflare,' suggests prior flagging by automated security systems. Current status indicates the domain has been taken offline, likely due to enforcement actions or hosting provider intervention. Organizations are advised to block the domain and associated IP address (172.66.47.15) at the network level. Security teams should monitor for credential reuse attempts from users who may have interacted with the site prior to its takedown. Additional scrutiny is recommended for domains registered under the same infrastructure or with similar naming patterns.