io-us--ledgre-live[.]pages[.]dev

PhishDestroy identifies io-us--ledgre-live.pages.dev as a recently active generic phishing domain linked to a fraudulent campaign targeting unsuspecting users. The domain leverages Cloudflare Pages for hosting, obscuring its true infrastructure while maintaining high availability. No specific brand or drainer kit has been attributed to this domain as of this investigation, though its structure suggests a broad, opportunistic lureset designed to harvest credentials or sensitive data. The use of Cloudflare Pages indicates an attempt to evade traditional takedown mechanisms due to the platform's legitimate status and widespread use in legitimate deployments.

Technical indicators confirm a high-risk profile despite current low detection rates. VirusTotal analysis shows 0 detections out of 95 engines, indicating that signature-based defenses have not yet flagged the domain. The domain is registered through Cloudflare, Inc., and resolves to IP address 172.66.46.233. The SSL certificate is issued by Google Trust Services, which may enhance its perceived legitimacy. While the exact registration date is not disclosed in public records, the domain's recent creation and active status suggest a fast-moving campaign. The domain remains unlisted on Google Safe Browsing (GSB) and has not been identified on major threat intelligence blocklists as of this report.

This domain is currently classified as active with an 'under_investigation' status, and PhishDestroy has flagged it under seed 'ed35c4'. Immediate defensive actions include adding the domain and IP (172.66.46.233) to network and endpoint blocklists. Users are strongly advised to avoid interacting with this domain and to report any suspicious activity to their security teams. Although the risk level is currently under review, the combination of low detection rates, use of legitimate infrastructure, and active status warrants heightened caution. PhishDestroy continues to monitor this campaign and will update stakeholders as new intelligence becomes available.