eng-liveledge-learn[.]pages[.]dev

Analysis of the domain eng-liveledge-learn.pages.dev indicates confirmed phishing infrastructure with elevated risk as of July 29, 2026. The domain was registered on October 16, 2025, through Cloudflare Pages, a platform frequently exploited for hosting phishing content due to its free, low-friction deployment. Security vendor detections on VirusTotal report 14 of 91 engines flagging the domain as malicious, a detection rate consistent with active phishing campaigns. Additionally, the domain appears on one security blocklist and is specifically blocked by PhishDestroy, further corroborating its malicious classification. Infrastructure analysis reveals no association with legitimate services or brands based on available data.

The exact content of the site remains unanalyzed, though the domain naming pattern—combining generic terms like 'eng', 'live', 'ledge', and 'learn'—aligns with tactics used to evade keyword-based filters. The use of Cloudflare Pages as a hosting provider complicates takedown efforts, as the registrar does not directly control content removal. No SSL certificate anomalies or HTTP status irregularities were reported in the provided data, though this does not diminish the domain's confirmed malicious status. Defenders should treat this domain as an active phishing threat.

Network-level blocking is recommended, particularly for organizations vulnerable to credential harvesting or social engineering attacks. Given the domain's presence on a blocklist and detection by multiple security vendors, automated alerting for connections to eng-liveledge-learn.pages.dev should be prioritized. Further investigation into the campaign's scope, including potential ties to broader phishing kits or threat actor infrastructure, is warranted. No brand impersonation or specific scam category has been confirmed at this time, limiting targeted mitigation advice beyond generic phishing defenses.