desktop-ledgrcom-9mt[.]pages[.]dev

The domain desktop-ledgrcom-9mt.pages.dev is currently flagged as a generic phishing infrastructure. Technical analysis shows that the hostname resolves to the IPv4 address 172.66.44.85, which is hosted by Cloudflare, Inc. The registration details indicate the domain was provisioned through Cloudflare's registrar service, and its authoritative name servers are damien.ns.cloudflare.com and tiffany.ns.cloudflare.com, both owned by Cloudflare. The domain appears on a single external security blocklist and has been explicitly blocked by the PhishDestroy mitigation platform, confirming that at least one security vendor considers the domain malicious.

VirusTotal has processed the domain with 91 antivirus and URL scanning engines; none of the engines reported a detection, but the lack of a positive result does not constitute evidence of benign intent. No additional intelligence such as Safe Browsing status, Open Threat Exchange entries, SSL certificate data, HTTP response codes, or page title information is available at this time. Consequently, the confidence level of the phishing classification rests on the blocklist entry, the PhishDestroy block, and the observed hosting pattern typical of disposable or fast‑flux domains.

Defenders should treat any traffic to or from desktop-ledgrcom-9mt.pages.dev as high‑risk. Recommended actions include adding the domain to outbound and inbound deny lists, monitoring DNS queries for this hostname, and correlating any internal user activity that contacts the associated IP address 172.66.44.85. Continuous re‑evaluation is advised, as future scans or community reports may alter the threat posture.