legre-live-homepage[.]pages[.]dev

The domain legre-live-homepage.pages.dev is currently listed on a security blocklist and is actively blocked by the PhishDestroy service. Infrastructure analysis shows the domain is hosted on Cloudflare’s edge network, using the authoritative name servers athena.ns.cloudflare.com and coleman.ns.cloudflare.com. DNS resolution points to the IP address 172.66.47.181, a Cloudflare‑owned address that is shared among many unrelated sites, making attribution to a specific operator difficult. Registration data indicates the domain was provisioned through Cloudflare, Inc., without public registrar details, which is consistent with the platform’s privacy‑preserving defaults.

VirusTotal scans have returned ten positive detections out of ninety‑one submitted security vendors, confirming that multiple independent scanners have identified malicious characteristics. The blocklist entry and the PhishDestroy block further corroborate a phishing intent, although the exact brand or credential target has not been disclosed in the available intelligence. No additional information about page title, SSL certificate metadata, HTTP response codes, or Safe Browsing verdicts is present, leaving those vectors unverified.

Given the confirmed blocklist presence and the multi‑vendor detection count, defenders should treat traffic to this domain as hostile. Recommended mitigation steps include adding the domain to network‑level deny lists, updating web‑filter policies to block both the domain and its resolved IP, and monitoring for any outbound connections that may attempt to reach the same Cloudflare edge address. Continuous re‑evaluation is advised, as further analysis of the landing page content or TLS certificate could reveal additional indicators of compromise.