page-ledgr-eng[.]pages[.]dev
“Suspected Phishing | Cloudflare”
page-ledgr-eng.pages.dev — Conteúdo indisponível. Representação da marca: Google. Resumo das evidências: VirusTotal 6/91 (alphaMountain.ai, BitDefender, CyRadar, Fortinet, G-Data); URLScan malicious verdict; PhishDestroy score 83/100. Registrador: Cloudflare.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
page-ledgr-eng.pages.dev was observed on July 29, 2026 as part of an active generic phishing campaign. The domain resolves to the IPv4 address 172.66.44.79 and is served from Cloudflare’s network, using the authoritative nameservers clarissa.ns.cloudflare.com and vicky.ns.cloudflare.com. Registration details show the domain was provisioned through Cloudflare, Inc., which is a common hosting choice for malicious operators seeking rapid deployment and DDoS mitigation.
The domain is currently listed on a public security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that at least one threat‑intelligence provider has confirmed malicious use. VirusTotal analysis shows that six out of ninety‑one scanning engines have flagged the domain as malicious, reinforcing the suspicion raised by the blocklist entry. No additional public reputation services, such as Google Safe Browsing or OTX, are referenced in the available data, and the page title or any brand targets have not been disclosed, leaving the exact lure or credential‑harvesting technique unknown.
Defenders should prioritize denying any outbound connections to 172.66.44.79, adding page-ledgr-eng.pages.dev to local DNS blocklists, and ensuring that email filters flag URLs containing the domain. Continuous monitoring of the Cloudflare nameserver records is advised, as changes may indicate a shift in infrastructure. Because the domain is actively flagged, intrusion‑detection systems should generate alerts on any attempted HTTP or HTTPS requests, and incident‑response teams should treat any credential submissions to this host as compromised.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of page-ledgr-eng.pages.dev · checked Jul 29, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo