ledgre-live-desktopp[.]pages[.]dev

Analysis as of July 29 2026 indicates that the domain ledgre-live-desktopp.pages.dev is actively being used for phishing. The domain is hosted on Cloudflare’s edge network and resolves to IP 172.66.47.98, which is owned by Cloudflare, Inc. The authoritative name servers are bingo.ns.cloudflare.com and jonah.ns.cloudflare.com, confirming that the domain’s DNS is managed through Cloudflare’s services. Registration details show the registrar is Cloudflare, Inc., with no further WHOIS data disclosed. VirusTotal scans have returned nine positive detections out of ninety‑one antivirus and URL‑reputation engines, demonstrating that multiple security products have flagged the domain as malicious.

The domain is listed on at least one public security blocklist and is actively blocked by the PhishDestroy mitigation service. No additional public signals such as Google Safe Browsing, OTX pulse, SSL certificate details, HTTP response codes, or trust‑score metrics were observed in the available intelligence. Consequently, the presence of multiple vendor detections, blocklist inclusion, and active blocking by PhishDestroy collectively support a high confidence assessment that the site is engaged in phishing.

Uncertainty remains around the specific content hosted at the URL, the exact phishing campaign vector, and any affiliated command‑and‑control infrastructure, as page‑title and content analysis have not been disclosed. Defenders should add ledgre-live-desktopp.pages.dev to local deny lists, ensure network perimeter filters reference the observed blocklist entries, and monitor for any traffic to the underlying Cloudflare IP address. Continuous re‑scanning with VirusTotal and inclusion in endpoint URL filtering solutions are recommended to capture any future changes in the domain’s threat posture.