lejr-live-cloud[.]pages[.]dev

The domain lejr-live-cloud.pages.dev is flagged as a generic phishing infrastructure with an elevated risk rating as of July 29, 2026. Registration data shows the domain was provisioned through Cloudflare, Inc., and the authoritative name servers are bristol.ns.cloudflare.com and matias.ns.cloudflare.com, indicating that the domain relies on Cloudflare’s DNS and edge services for hosting. DNS resolution returns the IP address 172.66.44.144, a Cloudflare‑owned address that provides anonymity for the underlying web server.

VirusTotal analysis reports that nine of ninety‑one security vendors have generated detections for this domain, suggesting that multiple independent scanners have identified malicious characteristics. The domain is listed on a single public blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one anti‑phishing platform has taken remedial action. No additional intelligence such as SSL certificate details, HTTP response codes, Safe Browsing status, or page title information is available in the current dataset, leaving the exact payload or credential‑harvesting mechanism unverified.

Defenders should prioritize blocking traffic to 172.66.44.144 and the fully qualified domain name lejr-live-cloud.pages.dev at network perimeters, update intrusion detection signatures to include the observed detection patterns, and monitor DNS query logs for any attempts to resolve the domain. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators of compromise or victim targeting patterns.