lediufj-a0aj4[.]pages[.]dev

On July 25, 2026, the domain lediufj-a0aj4.pages.dev was examined following its removal from public access. The site returned an HTTP 403 response, indicating that the server is actively refusing client requests. The domain was registered on February 21, 2026 through Cloudflare, Inc., and the authoritative nameservers listed are west.ns.cloudflare.com and jo.ns.cloudflare.com, confirming that the domain is fully hosted on the Cloudflare platform. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 label, a standard certificate that does not provide any indication of malicious intent but confirms the use of HTTPS.

The page title returned by the server reads "Suspected phishing site | Cloudflare," and the detected technology stack includes HTTP/3, HSTS, and Cloudflare's edge services, all typical of a cloud‑hosted site. VirusTotal analysis shows that 13 of 93 scanning engines flagged the domain, reinforcing the suspicion of malicious activity. Additional reputation data indicate a Gridinsoft trust score of 0 out of 100, effectively labeling the site as completely untrusted. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, further corroborating its classification as a credential‑phishing resource. Despite the evidence, certain aspects remain uncertain.

No visual or content inspection was performed because the site is offline, so the exact phishing payload, targeted brand, or credential‑capture mechanism cannot be confirmed. No Safe Browsing or Open Threat Exchange (OTX) entries were provided, and the absence of additional blocklist listings limits the view of broader distribution.