desktop-live-ledggr[.]pages[.]dev

This domain, desktop-live-ledggr.pages.dev, is identified as a generic phishing site specifically designed to mimic Cloudflare authentication portals. Analysis confirms it operates as a credential harvesting endpoint, presenting fraudulent login interfaces to capture user credentials. The domain currently remains offline following detection and enforcement actions. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 04, 2026, with resolution to IP address 172.66.47.92. Security vendor assessments show 6 of 95 VirusTotal engines flagged the domain as malicious. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. The domain appears on one security blocklist, and independent trust scoring systems assign it a 0/100 trust rating. The page title explicitly states 'Suspected phishing site | Cloudflare,' indicating prior detection by the hosting provider. Current status indicates the domain has been taken offline, though residual risk persists for users who may have interacted with it during its active window. Organizations are advised to implement immediate countermeasures including DNS blackholing for 172.66.47.92, deployment of indicators of compromise (IOCs) across security controls, and forced password resets for any accounts potentially exposed. Security teams should monitor for related infrastructure patterns, particularly domains leveraging the 'pages.dev' subdomain structure with similar naming conventions. End users should verify domain authenticity before entering credentials, particularly on pages requesting Cloudflare login details.