ledjre-com-start[.]pages[.]dev

The domain ledjre-com-start.pages.dev is observed as active in the threat intelligence feeds and has been assigned an elevated risk rating for generic phishing activity. VirusTotal analysis shows that 12 of 91 scanning engines have flagged the domain, indicating a moderate level of detection across the security community. DNS resolution points to the IPv4 address 188.114.97.3, and the authoritative name servers are david.ns.cloudflare.com and olga.ns.cloudflare.com, confirming that the domain is hosted behind Cloudflare’s infrastructure. Registration information lists Cloudflare, Inc. as the registrar, which is consistent with the use of Cloudflare’s DNS and edge services. The domain appears on a single external blocklist and is actively blocked by the PhishDestroy remediation service, providing an additional layer of defensive coverage.

No publicly available page title, SSL certificate details, HTTP status code, or content snapshots have been disclosed, so the exact visual or functional characteristics of the site remain unknown. Consequently, analysts cannot confirm which brand or service the page may be attempting to imitate, nor can they identify specific credential‑capture mechanisms. The lack of visible evidence limits attribution to a particular phishing kit or campaign. Defenders should prioritize the domain in network and endpoint controls. Adding ledjre-com-start.pages.dev to DNS sinkhole lists, web‑proxy block rules, and endpoint URL filtering will prevent user access.

The associated IP address 188.114.97.3 should be added to firewall deny lists, recognizing that Cloudflare may host multiple unrelated domains on the same address. Continuous monitoring of VirusTotal and other multi‑engine scanners is advised to capture any changes in detection count. Organizations using Cloudflare‑based DNS should consider enabling DNS‑SEC validation to mitigate potential cache‑poisoning attempts.