lejar-live-app[.]pages[.]dev

Analysis of lejar-live-app.pages.dev indicates that the domain is currently active and classified as a generic phishing threat with an elevated risk rating. The domain resolves to the IP address 188.114.97.3 and is hosted on infrastructure provided by Cloudflare, Inc., as evidenced by the authoritative nameservers june.ns.cloudflare.com and watson.ns.cloudflare.com. Registration data confirms that the domain was provisioned through Cloudflare, Inc., which aligns with the observed hosting environment.

The domain appears on a single security blocklist and has been explicitly flagged by the PhishDestroy blocklist, demonstrating that at least one trusted threat intelligence source has taken action to block it. VirusTotal analysis shows that six out of ninety-one security vendors have reported detections for the domain, reinforcing the suspicion that malicious activity is associated with it. No additional public intelligence such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, or page title information is presently available, leaving those aspects of the investigation unresolved.

Defenders should prioritize the addition of lejar-live-app.pages.dev to network and endpoint blocklists, enforce DNS filtering to prevent resolution to 188.114.97.3, and monitor for any outbound traffic to the associated IP range. Continued observation of VirusTotal and other aggregators is recommended to capture any increase in detection counts, and periodic re‑scanning of the domain should be performed to detect potential changes in its threat profile.