ladger-live-people[.]pages[.]dev

Analysis as of July 29 2026 indicates that the domain ladger-live-people.pages.dev is currently active in a phishing campaign. The domain is hosted on Cloudflare’s network, as evidenced by the authoritative nameservers jaime.ns.cloudflare.com and liberty.ns.cloudflare.com, and resolves to the IP address 172.66.47.187. Registration is noted to be through Cloudflare, Inc., which is consistent with the use of Cloudflare‑provided DNS. The infrastructure has been observed on a single security blocklist and is explicitly blocked by the PhishDestroy service.

VirusTotal scans show that six of ninety‑one antivirus or URL‑reputation engines flagged the domain, confirming that multiple independent sensors consider it malicious. No additional public evidence such as SSL certificate details, HTTP response codes, page title, or brand targeting was supplied for this host, so the exact content and lure used remain unconfirmed. The limited detection surface suggests that the phishing operation may rely on short‑lived or rapidly‑changing landing pages. Defenders should add ladger-live-people.pages.dev to network‑level deny lists, include the resolved IP 172.66.47.187 in endpoint and firewall block rules, and monitor Cloudflare‑associated name server records for any similar domains that share the same authoritative servers.

Querying Google Safe Browsing or other real‑time URL reputation services can provide early warning of future sightings. Because the domain is hosted on a shared Cloudflare IP range, blocking the single IP may affect unrelated legitimate services; therefore, domain‑based filtering is preferred where possible. Continuous telemetry collection from DNS logs and proxy servers is recommended to detect any subsequent resolution attempts or HTTP requests to this host.