access-ledzer-lve-long-io[.]pages[.]dev

The domain access-ledzer-lve-long-io.pages.dev is currently active and classified as a generic phishing site with an elevated risk rating. Infrastructure analysis shows the domain resolves to the IP address 188.114.96.3, which is hosted by Cloudflare, Inc. The authoritative name servers for the zone are oaklyn.ns.cloudflare.com and rene.ns.cloudflare.com, confirming that the domain’s DNS is managed through Cloudflare’s platform. Registration data indicates the domain was created using Cloudflare’s registrar services, a common choice for threat actors seeking rapid deployment and built‑in DDoS protection.

Detection telemetry reveals that nine of ninety‑one security vendors on VirusTotal have flagged the domain, demonstrating a modest but notable level of consensus among scanning engines. The domain is listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy service, which further corroborates its malicious intent. No additional public blocklists or Safe Browsing entries were identified in the supplied intelligence.

While the available data confirms the domain’s malicious purpose, details such as the exact page title, SSL certificate attributes, HTTP response codes, and any observed payloads remain unverified. Consequently, analysts should treat the domain as hostile and prioritize its containment. Recommended defensive actions include updating network and endpoint blocking rules to deny traffic to 188.114.96.3 and to the full host name, adding the domain to local blocklists, and monitoring for any related C2 infrastructure that may share the same Cloudflare name servers. Continuous re‑evaluation is advised, as further reconnaissance may reveal additional indicators of compromise or expanded campaign activity.