web-cloud-ldgr-logix[.]pages[.]dev

Analysis of the domain web-cloud-ldgr-logix.pages.dev indicates that it is currently active and being used for credential‑harvesting activities. The domain is hosted on Cloudflare’s network and resolves to the IP address 188.114.96.3, which is part of Cloudflare’s global edge infrastructure. Registration details show the registrar as Cloudflare, Inc., and the authoritative name servers are amir.ns.cloudflare.com and liberty.ns.cloudflare.com, consistent with a typical Cloudflare‑hosted site. Reputation checks reveal that ten of ninety‑one antivirus and URL‑filtering engines on VirusTotal have flagged the domain as malicious, confirming a consensus of at least moderate risk among security vendors. The domain is listed on a public security blocklist and is actively blocked by the PhishDestroy sink‑hole, demonstrating that external mitigation services have already taken action against it.

No additional public blocklists or safe‑browsing feeds are reported for this host. No TLS certificate details, HTTP response codes, or page‑title metadata have been published, so the exact content served by the site remains unverified. Consequently, the specific brand or service being spoofed cannot be confirmed at this time. However, the presence of multiple vendor detections and active blocklist entries strongly suggests that the site is being leveraged for generic phishing campaigns aimed at harvesting user credentials.

Defenders should add the domain and its associated IP address to outbound‑traffic denial lists, enforce DNS‑level blocking, and monitor for any outbound connections to the Cloudflare edge nodes that resolve to 188.114.96.3. Security appliances that support reputation‑based filtering should be updated with the latest vendor detection scores. Incident response teams should also consider searching internal logs for authentication attempts that reference this domain, as compromised credentials may be exfiltrated through it.