en-us-dsketop-ledgre[.]pages[.]dev

This domain, en-us-dsketop-ledgre.pages.dev, is currently classified as a generic phishing site with an elevated risk rating and an active status as of July 29 2026. Infrastructure analysis shows the domain is hosted on Cloudflare’s network, using the authoritative name servers carla.ns.cloudflare.com and clay.ns.cloudflare.com, and resolves to the IPv4 address 172.66.44.134. The registration record indicates the registrar is Cloudflare, Inc., which is consistent with the observed hosting environment. Threat intelligence feeds have placed the domain on a single security blocklist, and the anti‑phishing service PhishDestroy has actively blocked it.

VirusTotal scans have resulted in nine of ninety‑one antivirus or URL‑reputation engines flagging the domain as malicious, providing additional corroboration of its abusive nature. No public page title, SSL certificate details, Safe Browsing verdict, or Open Threat Exchange (OTX) entries are presently available, leaving the exact content and lure technique of the site unverified. Because the hosting relies on Cloudflare’s shared infrastructure, IP‑based blocking may inadvertently affect benign tenants; consequently, DNS‑level denial or URL filtering is the recommended primary mitigation.

Defenders should immediately block en‑us‑dsketop‑ledgre.pages.dev at the DNS or proxy layer, add the associated IP address 172.66.44.134 to network‑level deny lists where appropriate, and monitor for any outbound connections to the host. Incident response teams should capture and retain any network logs that reference this domain for further forensic analysis. Continuous re‑scanning with VirusTotal and periodic checks against emerging blocklists are advised to detect any changes in the domain’s reputation.