weblegr-live-desk[.]pages[.]dev

PhishDestroy identifies weblegr-live-desk.pages.dev as an active credential theft phishing domain currently distributing under the guise of a live help desk portal. This domain resolves to IP 188.114.97.3 and is registered through Cloudflare, Inc., leveraging the company’s infrastructure to obscure its malicious origins. The false portal impersonates legitimate support interfaces to trick users into surrendering sensitive login credentials, putting accounts at risk of unauthorized access and identity theft. This domain was flagged by 1 out of 95 VirusTotal security vendors and holds a Google Trust Services SSL certificate, features often exploited to build user trust. The registration through Cloudflare complicates takedown efforts and increases operational opacity. Additional adversary infrastructure linked to this domain includes associations with known phishing campaigns and multiple blocklists, indicating coordinated malicious activity. Users should treat all login prompts on this domain as fraudulent and verify any support requests through official, independently obtained channels. If you have visited weblegr-live-desk.pages.dev or entered credentials, immediately change passwords on all affected services and enable multi-factor authentication. Use a password manager to detect credential reuse across sites and scan devices with updated antivirus software. Report any suspicious transactions to your financial institutions and consider freezing credit files if personal data was exposed. Avoid clicking links in unsolicited messages and verify all support requests by contacting official vendors directly through verified contact information.