live-led-com-un[.]pages[.]dev

The domain live-led-com-un.pages.dev is currently active and classified as a generic phishing campaign with an elevated risk rating. Infrastructure analysis shows the domain resolves to IP address 172.66.44.119 and is hosted on Cloudflare’s network, as evidenced by the registrar entry (registered through Cloudflare, Inc.) and the authoritative nameservers chloe.ns.cloudflare.com and kolton.ns.cloudflare.com. VirusTotal has recorded 11 detections out of 91 scanned security vendors, indicating that a notable minority of scanners consider the host malicious.

The domain is already blocked by the PhishDestroy service and appears on a single external security blocklist, suggesting that some defensive feeds have incorporated it. No public information is available on the site’s SSL certificate, HTTP response code, page title, Safe Browsing status, or any attribution to a specific brand or phishing kit. Consequently, the exact content served by the site and the credential‑ harvesting technique remain unknown.

Defenders should treat any traffic to or from live-led-com-un.pages.dev as suspicious. Recommended actions include adding the domain and its IP address to DNS‑based deny lists, configuring web proxies or firewalls to block HTTP/S requests to the host, monitoring outbound connections for signs of data exfiltration, and retaining the domain in threat‑intel feeds for future correlation. Continuous re‑query of VirusTotal and other sandbox services is advised to capture any changes in detection scores or observed payloads.