lejerlive--desktop-es[.]pages[.]dev

The domain lejerlive--desktop-es.pages.dev is listed as active on July 29, 2026 with an elevated risk rating. Infrastructure analysis shows the domain was registered through Cloudflare, Inc. and is served by the authoritative nameservers khalid.ns.cloudflare.com and paityn.ns.cloudflare.com, indicating reliance on Cloudflare’s DNS infrastructure. DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare’s edge network.

The domain appears on one public security blocklist and is specifically flagged by PhishDestroy, confirming that defensive feeds have identified it as malicious. A VirusTotal scan reports six positive detections out of ninety‑one submitted security engines, providing independent vendor consensus that the site is involved in phishing activity. No additional details such as page title, targeted brand, or payload characteristics have been disclosed, leaving the precise content and victim interaction flow unverified.

Defenders should immediately block the domain and its associated IP address at network and DNS layers, consider sinkholing the address, and monitor for any outbound connections to 188.114.97.3. Ongoing re‑assessment with VirusTotal and inclusion in updated threat‑intel feeds are advised to capture any changes in detection status. Given the active status and elevated risk, prompt mitigation actions are recommended to reduce the likelihood of credential harvesting attempts.