legeer-live-web[.]pages[.]dev

Analysis of the domain legeer-live-web.pages.dev as of July 29, 2026 indicates that it is actively associated with a generic phishing threat. The domain resolves to the IP address 172.66.47.182, which is owned by Cloudflare, Inc., and the authoritative name servers are johnny.ns.cloudflare.com and kim.ns.cloudflare.com, confirming that the hosting infrastructure is provided through Cloudflare’s edge network. The domain appears on a single security blocklist and is explicitly listed by PhishDestroy, demonstrating that at least one external mitigation service has flagged it as malicious. VirusTotal has recorded six positive detections out of ninety‑one scanned security vendors, reinforcing the suspicion that the site is being used for phishing operations.

Registration data shows the domain was provisioned through Cloudflare, Inc., which is consistent with the observed name‑server configuration. No publicly available information regarding the site’s SSL certificate, HTTP response codes, page title, or content has been disclosed, leaving the exact visual or functional characteristics of the page unknown. Consequently, defenders cannot rely on content‑based indicators such as page titles or brand references to identify the site, and must instead depend on network‑level and reputation signals. Given the concrete evidence, security teams should add legeer-live-web.pages.dev to DNS‑based deny lists and consider blocking traffic to its resolved IP address 172.66.47.182 at the perimeter.

Continuous monitoring of Cloudflare‑derived threat feeds is advised, as the domain may be re‑hosted or moved to additional IP ranges. Organizations employing web‑filtering solutions should ensure that the domain is flagged by URL categorization services, and incident response teams should be prepared to investigate any credential submissions that reference this domain.