site-ledges[.]pages[.]dev

PhishDestroy identifies site-ledges.pages.dev as an active phishing domain hosting a fraudulent login page designed to harvest user credentials. This domain resolves to IP 172.66.45.39 and is registered through Cloudflare, Inc., with SSL certificates issued by Google Trust Services. The threat actor leverages trusted infrastructure to deceive targets into entering sensitive information on a spoofed authentication portal.

This domain was flagged by 1 out of 95 VirusTotal security vendors, indicating limited but confirmed malicious detection. The infrastructure relies on Pages.dev, a legitimate Cloudflare Pages domain, which complicates detection by blending with normal web services. The threat level is elevated due to active distribution and the potential for credential theft across multiple platforms.

Users who accessed this domain should assume their entered credentials may have been compromised. Immediately change passwords for accounts tied to this login page, enable multi-factor authentication where available, and scan devices for malware using reputable security software. Report the incident to your organization’s security team or the platform being impersonated if applicable.