ledarliv-download[.]pages[.]dev

Domain ledarliv-download.pages.dev (seed: e60b81) is currently flagged as a generic phishing host designed for malicious file hosting by PhishDestroy analysts. This domain mimics legitimate file-sharing services to deceive users into downloading compromised payloads, typically targeting victims through social engineering tactics like fake software updates or trojanized downloads. No specific brand impersonation (e.g., Adobe, Windows) or drainer kit signature was identified in initial analysis, but the infrastructure strongly suggests opportunistic credential harvesting or malware delivery.

This domain exhibits multiple technical red flags: it resolves to IP 172.66.46.210, registered through Cloudflare, Inc., with a Google Trust Services SSL certificate. VirusTotal currently shows 15/95 detections (unflagged), and the domain's age or creation date was not disclosed in public records. Google Safe Browsing (GSB) status remains unflagged, and blocklist counts are pending further enumeration. Despite low detection rates, the infrastructure's alignment with known malicious patterns warrants immediate caution.

The domain is currently ACTIVE, with active hosting maintained on Cloudflare's pages.dev infrastructure. While automated detection remains low, manual analysis confirms malicious intent based on behavioral patterns and hosting context. No takedown notices or blocklists have been issued yet. Users are advised to avoid interaction and report this domain to PhishDestroy for further analysis. The remaining risk is moderate due to active hosting and SSL certificate legitimacy, which could mislead casual inspection.