ldgr3424ss86d[.]vennie603[.]workers[.]dev

The domain ldgr3424ss86d.vennie603.workers.dev is a generic phishing site designed to steal user credentials through credential phishing. It does not impersonate a specific brand or use a known drainer kit. As of the latest verification, ldgr3424ss86d.vennie603.workers.dev has been taken offline, but it previously posed an elevated risk to visitors.

Technical indicators confirm the malicious nature of ldgr3424ss86d.vennie603.workers.dev. The domain was flagged by 10 of 95 security vendors on VirusTotal, including BitDefender, CRDF, and CyRadar, though Google Safe Browsing did not detect it. It appeared on one security blocklist (PhishDestroy) and was registered through Cloudflare, Inc. on February 21, 2026. The domain resolved to the IP address 104.21.43.44, hosted by Cloudflare in the US (AS13335), and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Suspected phishing site | Cloudflare', and the site returned an HTTP 403 status. Gridinsoft assigned it a trust score of 0/100, and technologies detected included HSTS, Cloudflare, and HTTP/3.

Users who may have interacted with ldgr3424ss86d.vennie603.workers.dev should immediately change passwords for any accounts accessed while the site was active, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in blocking future threats. If financial or sensitive data was exposed, consider contacting relevant institutions to secure accounts.