# download-ldgar-live.pages.dev — SUSPICIOUS

> download-ldgar-live.pages.dev poses as an LDGAR file-hosting portal but serves malicious downloads. Hosted on Cloudflare IP 188.114.96.

## Summary
PhishDestroy identifies download-ldgar-live.pages.dev as an active generic phishing domain currently under investigation. The domain is weaponized to impersonate a legitimate LDGAR file-hosting service, luring victims into downloading malicious payloads disguised as official documents. The campaign is confirmed live with no current blocklist presence, requiring urgent user caution.


This domain was flagged by 0 of 95 VirusTotal vendors, indicating zero detections at time of analysis. It resolves to IP 188.114.96.3 via Cloudflare, Inc., leveraging a Google Trust Services SSL certificate to establish false legitimacy. Registered through Cloudflare’s Pages platform, the domain’s infrastructure aligns with modern phishing evasion techniques, bypassing traditional signature-based detection. The absence of detections highlights the need for behavioral and heuristic analysis rather than relying solely on signature feeds.


The campaign remains active with no mitigation in place. Concrete indicators include the domain’s Cloudflare Pages hosting, Google-hosted SSL certificate, and unflagged status despite zero vendor detections. Users must avoid all interactions with download-ldgar-live.pages.dev and report the domain to their security teams. Security practitioners should block the IP 188.114.96.3 at network perimeters and inspect DNS resolutions for Cloudflare IP mappings. Immediate action is required due to the zero-detection window and active campaign status.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/download-ldgar-live.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/download-ldgar-live.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/download-ldgar-live.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/download-ldgar-live.pages.dev/
Last updated: 2026-04-03