ldr-desktop-ledgelive[.]pages[.]dev

The domain ldr-desktop-ledgelive.pages.dev is currently classified as a generic phishing site, specifically designed to impersonate Microsoft 365 login portals. Analysis indicates the domain is offline, though it previously hosted content mimicking enterprise authentication pages to harvest user credentials. No direct brand impersonation confirmation exists, but the naming convention suggests an intent to deceive users into believing it is a legitimate Microsoft service endpoint. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. and resolves to the IP address 188.114.97.3. Despite its creation date of April 03, 2026, the domain has not been flagged by any of the 95 vendors on VirusTotal. However, it appears on one security blocklist, and Gridinsoft assigns it a trust score of 0 out of 100. The SSL certificate is issued by Google Trust Services, which may lend a superficial appearance of legitimacy. The page title, 'Suspected phishing site | Cloudflare,' suggests that Cloudflare's internal systems may have detected malicious activity, though the domain remains unconfirmed by broader threat intelligence sources. Current status indicates the domain has been taken offline, likely due to enforcement action by Cloudflare or the hosting provider. Organizations are advised to proactively block the domain and its resolving IP (188.114.97.3) at the network perimeter. Security teams should monitor for any resurgence of the domain or similar variants using the 'ledgelive' naming pattern. End-users who may have interacted with the site should be instructed to reset credentials, particularly for Microsoft 365 accounts, and enable multi-factor authentication. Given the domain's creation date in the future (April 2026), this may indicate a misconfiguration or an attempt to evade time-based detection mechanisms, warranting further investigation into the registrar's records.