dekstop-eng-ldgr-x[.]pages[.]dev

Analysis of dekstop-eng-ldgr-x.pages.dev indicates that the domain is actively being used for a phishing operation and has been assigned an elevated risk rating. The domain is registered through Cloudflare, Inc., and is hosted on the shared Cloudflare edge infrastructure, resolving to the IP address 172.66.47.203. DNS resolution is served by the authoritative nameservers anirban.ns.cloudflare.com and tia.ns.cloudflare.com, both of which are owned by Cloudflare and are typical for domains that leverage the provider’s CDN and protection services.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy platform, demonstrating that at least one reputable anti‑phishing service has observed malicious activity linked to this host. VirusTotal scans show that 11 of 91 security vendors have flagged the domain as malicious, providing independent corroboration of the phishing classification. No additional intelligence such as page titles, brand targeting, or kit identifiers is currently available, so the precise content and victim‑targeting methodology remain unverified.

Defenders should incorporate the domain and its associated IP address into network‑level blocklists, update DNS filtering rules to deny resolution of the host, and monitor outbound connections to the 172.66.47.203 address for potential data exfiltration. Continuous re‑evaluation is recommended, as further analysis may reveal additional indicators such as credential‑harvesting forms or malicious payload delivery.