lejar-live-desktop-s[.]pages[.]dev

This domain, lejar-live-desktop-s.pages.dev, is currently classified as an active generic phishing site with an elevated risk rating. The infrastructure is hosted on Cloudflare’s network; the domain resolves to the IP address 172.66.45.30 and uses Cloudflare’s default name servers margot.ns.cloudflare.com and vicky.ns.cloudflare.com. Registration was performed through Cloudflare, Inc., which limits visibility into the registrant’s identity. The domain appears on one security blocklist and is actively blocked by the PhishDestroy feed.

VirusTotal analysis indicates that 7 of 91 security vendors have flagged the domain as malicious, demonstrating partial consensus among scanning engines. No additional intelligence such as SSL/TLS certificate details, HTTP response codes, page title, or Safe Browsing entries has been published, so the exact content and lure technique remain unknown. The lack of a published SSL fingerprint or HTTP status prevents verification of certificate legitimacy or server behavior.

Defenders should immediately add the domain and its resolved IP to outbound and inbound deny lists, enforce DNS‑based blocking, and monitor for any traffic anomalies targeting the address. Continuous re‑evaluation of the domain on VirusTotal and other threat feeds is advised, as additional detections may appear. Integration with existing phishing detection tools will help surface any future campaign activity that leverages this infrastructure.