ladgr-live-hardw[.]pages[.]dev

The domain ladgr-live-hardw.pages.dev is currently active and has been classified with an elevated risk level due to its association with a generic phishing campaign. Infrastructure analysis shows the domain was registered through Cloudflare, Inc., and is serviced by the Cloudflare nameservers hassan.ns.cloudflare.com and vita.ns.cloudflare.com. DNS resolution points to the IP address 172.66.47.110, a Cloudflare edge node commonly used for content delivery and proxying. The domain is listed on the PhishDestroy blocklist and appears on one additional security blocklist, confirming that at least two independent threat intelligence sources have identified it as malicious.

VirusTotal scanning reports that nine out of ninety‑one security vendors have flagged the domain, indicating a modest but notable detection rate across the scanning ecosystem. No public page title or branding information has been disclosed, and the specific victim brand or login portal being spoofed remains unknown. Consequently, the exact content and lure employed by the site cannot be detailed at this time. Defenders should prioritize blocking DNS resolution to 172.66.47.110 for the ladgr-live-hardw.pages.dev host across enterprise firewalls and endpoint protection suites.

Security teams should also add the domain to URL filtering policies and monitor for any outbound connections from internal hosts to this address. Given its presence on reputable blocklists and the detection activity by multiple anti‑malware engines, a precautionary approach—such as isolating user accounts that may receive credential‑stealing attempts and increasing phishing awareness training—will help mitigate potential compromise. Continuous monitoring of threat intelligence feeds for updated indicators of compromise, such as altered IP addresses or new blocklist entries, is recommended to maintain an up‑to‑date defensive posture.