live-ledr-eng[.]pages[.]dev

PhishDestroy identifies live-ledr-eng.pages.dev as an active credential theft phishing domain under investigation. This fraudulent site mimics a legitimate brand interface to harvest user login details and session tokens, posing a direct risk to account security and sensitive data exposure.

This domain was flagged by PhishDestroy’s automated pipeline using seed 51f39c. It resolves to IP 172.66.46.233 and leverages a Google Trust Services SSL certificate, suggesting an attempt to appear legitimate. Registered through Cloudflare, Inc., the domain currently shows 0 detections on VirusTotal (6/95 engines), indicating it remains under the radar of most threat intelligence platforms. While the risk level is listed as 'under_investigation,' its active status and deceptive branding warrant immediate attention.

Users should avoid clicking links to live-ledr-eng.pages.dev and report any suspicious login prompts. Organizations are advised to block this domain at the network level and inspect DNS logs for related traffic. Enable multi-factor authentication and monitor accounts for unauthorized access following potential exposure. Consider submitting the domain to threat intelligence feeds to improve detection coverage.