eng-ledgr-cloud[.]pages[.]dev

This domain is flagged as an elevated-risk phishing site specializing in brand impersonation targeting Google. Analysis indicates the site was designed to deceive users into divulging sensitive credentials by mimicking legitimate Google services, leveraging visual and infrastructural similarities to the targeted brand. Infrastructure analysis reveals the domain eng-ledgr-cloud.pages.dev was registered through Cloudflare, Inc. on May 06, 2026, and resolves to the IP address 172.66.46.246. It appears on one security blocklist and is flagged by 3 out of 95 security vendors on VirusTotal. The domain employs an SSL certificate issued by Google Trust Services, further attempting to appear legitimate. Additional technical indicators include the use of HSTS, Cloudflare hosting, and HTTP/3 protocols. The Gridinsoft trust score for this domain is 0/100, reinforcing its malicious classification. Mitigation steps for this specific threat type include immediate blocking of the domain and its associated IP address (172.66.46.246) across all network security controls. Organizations should monitor for any attempts to access this domain within their logs and alert users who may have interacted with it. Given the use of Cloudflare infrastructure, security teams should also review other domains hosted on the same IP range for potential malicious activity. User education should emphasize verifying domain authenticity, particularly for services associated with targeted brands like Google, and reporting suspicious sites to security teams for further investigation.