ldgrres-leve[.]pages[.]dev

PhishDestroy identifies ldgrres-leve.pages.dev as an active credential theft domain impersonating a well-known brand to harvest user login credentials. The domain leverages a Google Trust Services SSL certificate to appear legitimate, while resolving to IP 172.66.47.190 hosted through Cloudflare. Despite zero VirusTotal detections, the page is currently under investigation for malicious activity targeting unsuspecting users through brand deception. This domain was flagged with the following indicators: VirusTotal detection count 1/95, hosted on Cloudflare, registered via Cloudflare, Inc., and linked to IP 172.66.47.190. No blocklist entries are currently recorded, but the low detection rate and active status warrant immediate caution. The use of a Pages.dev subdomain combined with a Google-issued SSL certificate suggests an attempt to bypass traditional security filters. If you visited this domain, do not enter any credentials or personal information. Clear your browser cache and cookies for this site. Run a malware scan on your device and change passwords for any accounts entered while on the page. Report the domain to your security team or via PhishDestroy’s portal using seed 001832 for further analysis. Avoid clicking links from unsolicited emails or messages related to this domain.