csom-ldgrs-sttrt[.]pages[.]dev

csom-ldgrs-sttrt.pages.dev is currently listed as an active generic phishing site with an elevated risk rating. The domain is hosted on Cloudflare’s infrastructure (registered through Cloudflare, Inc.) and resolves to the IP address 188.114.97.3. DNS resolution is provided by the authoritative name servers anahi.ns.cloudflare.com and fred.ns.cloudflare.com.

The domain appears on one external security blocklist and has been blocked by the PhishDestroy service. VirusTotal analysis shows that 9 of 91 scanned security vendors flagged the domain as malicious, indicating a moderate level of consensus among detection engines. No additional public intelligence such as Safe Browsing, OTX, SSL certificate details, HTTP status, or page title is presently available, leaving those aspects of the campaign unverified.

Consequently, confidence in the malicious classification rests on the blocklist entry, the PhishDestroy block, and the multi‑vendor detections reported by VirusTotal. Defenders should add the domain and its resolved IP to inbound and outbound filtering rules, monitor DNS queries for the associated Cloudflare name servers, and consider sharing the indicator of compromise with threat‑sharing communities. Continuous re‑evaluation is advised: periodic rescans with multi‑engine services, updates to blocklist feeds, and verification of any changes to hosting or infrastructure can help maintain effective detection as the campaign evolves.