lidgr-live[.]pages[.]dev

Analysis conducted on July 25, 2026 indicates that the domain lidgr-live.pages.dev was registered on April 06, 2026 through Cloudflare, Inc. The domain resolves to the Cloudflare edge address 188.114.97.3, which is associated with the Cloudflare network located in Canada. The authoritative nameservers agustin.ns.cloudflare.com and amber.ns.cloudflare.com confirm that the domain is hosted within Cloudflare’s infrastructure. HTTPS is served using a certificate issued by Google Trust Services under the WE1 intermediate, indicating a valid TLS chain but offering no indication of the underlying content. An HTTP request to the root URL returns a 403 status code, which is typical for Cloudflare’s default block page for suspected abuse.

The page title returned by the server is “Suspected phishing site | Cloudflare,” directly labeling the site as a phishing resource. Independent reputation services corroborate the malicious classification: Scamadviser assigns a trust score of 1 out of 100, Gridinsoft rates the site 0 out of 100, and the domain appears on at least one security blocklist. VirusTotal analysis shows that 12 of 94 scanned security vendors flag the domain as malicious, reinforcing the suspicion. The classified scam type is “Credential Phishing,” suggesting attempts to harvest user credentials.

The domain has been taken offline and is listed as blocked by PhishDestroy. While the available data confirms a high likelihood of phishing activity, the exact payload, targeted brands, or phishing kit employed have not been publicly disclosed. Defenders should continue to block the domain at network perimeter, update URL filtering lists, and monitor for any re‑registration attempts. Additional investigation of any associated subdomains or observed traffic patterns may reveal further infrastructure components.