ledgeerlive-desktop[.]pages[.]dev

PhishDestroy identifies ledgeerlive-desktop.pages.dev as an active fake software update scam site currently under investigation for credential theft and malware distribution. The domain masquerades as legitimate software update pages, tricking users into downloading malicious payloads under the guise of security or feature updates. Initial threat intelligence suggests this campaign leverages urgency-based social engineering to prompt immediate action, increasing the likelihood of victim engagement.

This domain was flagged by 11 of 95 VirusTotal vendors as of the latest scan, indicating it remains undetected by current antivirus engines. The site is registered through Cloudflare, Inc., resolves to IP address 188.114.97.3, and operates under an SSL certificate issued by Google Trust Services—features commonly abused to lend false legitimacy to phishing and malware-delivery pages. While creation date details are not disclosed by the registrar, the absence of detections and active status underscore the evasive nature of this threat actor.

Users are strongly advised to avoid interacting with ledgeerlive-desktop.pages.dev and verify software sources directly from official websites. Organizations should implement DNS filtering to block access to this domain and monitor network traffic for connections to 188.114.97.3. Report any observed activity to PhishDestroy or relevant cybersecurity authorities. Update endpoint protection signatures to enhance detection of similar campaigns leveraging Cloudflare or Google Trust Services certificates for obfuscation.