app-live-ledgor[.]pages[.]dev

PhishDestroy identifies app-live-ledgor.pages.dev as a potentially malicious domain associated with credential theft. While no specific brand impersonation or crypto drainer kits have been conclusively tied to this domain, the generic phishing activity targeting user credentials remains the primary concern. As the threat type is under investigation, continued monitoring is essential to determine the full extent of the attack vector.

Technical analysis reveals that app-live-ledgor.pages.dev holds a VirusTotal detection score of 5 out of 95, indicating it has not yet been flagged by antivirus engines. The domain is registered through Cloudflare, Inc., a common registrar for both legitimate and malicious sites due to their low-cost registrations and DNS services. The SSL certificate is issued by Google Trust Services, which may lend an appearance of legitimacy to end users. The domain resolves to IP address 188.114.97.3. There is no record of a Google Safe Browsing (GSB) blacklist status or inclusion in other major blocklists at this time. The domain was created recently, but exact creation date details are not specified in the available intelligence.

Currently, app-live-ledgor.pages.dev remains active and under investigation with a risk level classified as under_investigation. Security researchers recommend exercising caution by avoiding interaction with this domain, especially refraining from entering any personal or credential information. Security teams should continue to monitor VirusTotal and blocklist databases for updates. Given the lack of existing detections, user awareness and proactive blocking at network or endpoint levels serve as the main defenses until clearer threat intelligence is established.