cloud-live--ledgr-guide[.]pages[.]dev

The domain cloud-live--ledgr-guide.pages.dev has been identified as a credential harvesting phishing site targeting users of financial service platforms. Analysis indicates the page was designed to impersonate legitimate login portals, though no specific brand name was confirmed in the available metadata. The domain is currently offline, with its last known status marked as inactive following detection by security systems. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., resolving to the IP address 188.114.96.3. The domain was created on April 06, 2026, though this date may reflect a placeholder or misconfiguration. Detection metrics show 0 of 95 security vendors on VirusTotal flagged the domain at the time of assessment, suggesting either recent deployment or effective evasion techniques. The domain appears on one security blocklist, and its Gridinsoft trust score is 0 out of 100, indicating high-risk classification. The SSL certificate is issued by Google Trust Services, which does not inherently validate the legitimacy of the hosted content. Current status confirms the domain has been taken offline, likely due to enforcement actions by the hosting provider or security teams. Organizations are advised to monitor for residual redirects or newly registered domains using similar naming conventions. Network administrators should block the IP address 188.114.96.3 and domains associated with the registrar Cloudflare, Inc., pending further investigation. End-users should be educated on recognizing phishing indicators, particularly those mimicking financial service authentication pages.