live-ledgar[.]pages[.]dev

Analysis indicates that the domain live-ledgar.pages.dev is currently active and associated with a generic phishing campaign. The domain is hosted on Cloudflare’s infrastructure, as evidenced by registration through Cloudflare, Inc., and the use of Cloudflare‑owned nameservers ed.ns.cloudflare.com and eva.ns.cloudflare.com. DNS resolution points to the IP address 188.114.97.3, which is part of Cloudflare’s network and does not reveal a distinct backend hosting provider.

VirusTotal has recorded ten detections out of ninety‑one scanning engines, suggesting that multiple security products have identified malicious behavior linked to the domain. The domain is also listed on a single external blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing the assessment of malicious intent. No additional public intelligence such as Safe Browsing status, OTX entries, SSL certificate details, or HTTP response codes has been disclosed, leaving the precise content and tactics of the phishing page unverified.

Defenders should continue to block the domain at network perimeter controls, update DNS filtering policies to include the observed IP and nameserver ranges, and monitor for any new indicator updates. Further analysis of the hosted content, if accessible, would be required to confirm the exact phishing vector and target brand.