ledggers--lives--desktops[.]pages[.]dev

PhishDestroy has identified ledggers--lives--desktops.pages.dev as an active phishing domain designed for credential harvesting. This domain mimics legitimate desktop services to trick users into submitting sensitive login information. Security teams should treat this as a high-priority threat due to its active status and low detection rate.

This domain was flagged by PhishDestroy’s automated pipeline and shows concerning technical indicators. VirusTotal currently shows 0/95 detections, indicating it has evaded detection by all major antivirus engines. The domain is registered through Cloudflare, Inc., resolving to IP 188.114.97.3 via Google Trust Services SSL certificates. Despite its recent deployment, this domain has not yet been added to any public blocklists, leaving users exposed to potential compromise.

If you or your organization have interacted with ledggers--lives--desktops.pages.dev, take immediate action to mitigate risk. Disable any accounts that may have been accessed via this domain and rotate credentials stored in browser caches or password managers. Report the domain to your security team and block it at the network level using the IP address 188.114.97.3 and domain name. Monitor for unusual login attempts or data exfiltration attempts from affected systems. Consider deploying additional monitoring for lateral movement within your environment, as credential harvesting often precedes more severe attacks. Users should also enable multi-factor authentication on all critical services to reduce the impact of stolen credentials.