welcome-ledg-live[.]pages[.]dev

The domain welcome-ledg-live.pages.dev is currently active and listed as a generic phishing site under investigation. Registration data shows the domain was provisioned through Cloudflare, Inc., with authoritative nameservers maisie.ns.cloudflare.com and vern.ns.cloudflare.com, indicating the use of Cloudflare's DNS infrastructure. DNS resolution points to the IP address 172.66.45.26, which is part of Cloudflare's edge network, a common hosting choice for malicious actors seeking rapid deployment and obfuscation.

The domain has been added to a single security blocklist and is actively blocked by the PhishDestroy service, providing an early indicator of malicious intent. VirusTotal records reveal that the domain was scanned by 91 antivirus and URL‑filtering vendors, none of which returned a detection at the time of analysis; however, the lack of detections does not constitute confirmation of benign behavior and should be treated as inconclusive. No SSL/TLS certificate details, HTTP response codes, or page title information have been published, leaving the surface‑web characteristics of the site unverified.

Consequently, the precise phishing payload, targeted brand, or credential‑harvesting technique remains unknown. Defenders should consider immediate network‑level blocking of the domain and IP address, monitor DNS queries for related Cloudflare nameservers, and incorporate the domain into existing threat‑intel feeds. Continuous re‑evaluation is advised, as additional indicators such as malicious payloads, compromised credentials, or victim reports may emerge, potentially elevating the risk rating.