eng-ledgr-com[.]pages[.]dev

The domain eng-ledgr-com.pages.dev is currently classified as an active generic phishing threat as of July 29, 2026. The domain was registered on September 17, 2025, via Cloudflare Pages and resolves to IP address 188.114.96.3. The domain has been identified on one security blocklist, specifically PhishDestroy, indicating that it has been recognized within the threat intelligence community for malicious behavior. VirusTotal results show that 16 out of 91 security vendors flag this domain as malicious, reinforcing the assessment of elevated risk.

The use of Cloudflare Pages as the registration and hosting provider may provide some anonymity to the operators, making attribution and takedown efforts more challenging. At present, there is no specific evidence pointing to the impersonation of a particular brand or service, nor is there information about the site’s visible content, SSL certificate, or HTTP status. The nature of the phishing activity is therefore classified as generic based on current intelligence. Defenders should treat this domain as a credible threat and block access within their networks.

Continuous monitoring for related infrastructure or derivative domains is recommended, as is updating blocklists to include this indicator. If any internal traffic to this domain is detected, further investigation into potential compromise should be initiated immediately. The exact content and tactics employed by the site are not yet analyzed; additional intelligence gathering is advised to determine the full scope of the threat.