lives-ledgr-eng[.]pages[.]dev

The domain lives-ledgr-eng.pages.dev was registered on October 16, 2025 through Cloudflare, Inc. and is delegated to the Cloudflare name servers ainsley.ns.cloudflare.com and koa.ns.cloudflare.com. Infrastructure analysis shows the domain resolves to the IP address 172.66.44.249, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site is protected by HSTS and serves traffic over HTTP/3, using a TLS certificate issued by Google Trust Services under the WE1 label. An HTTP request to the host returns a 403 status code, and the site is currently taken offline, as indicated by the reported status.

The page title returned by the server is "Suspected phishing site | Cloudflare," and the scam type is classified as credential phishing. Google Safe Browsing has flagged the domain for social engineering, and the domain appears on one security blocklist. It has been blocked by PhishDestroy and received detections from 13 of 95 security vendors on VirusTotal. The Gridinsoft trust score is 0 out of 100, reinforcing the high‑risk assessment.

While the specific brand or service being impersonated has not been disclosed in the available data, the combination of a generic phishing page title, credential‑theft classification, and multiple vendor detections indicates a deliberate attempt to harvest user credentials. Defenders should continue to block the domain at network perimeter devices, update URL filtering and DNS sinkhole lists, and monitor for any resurgence of the host. Incident response teams should treat any logs referencing this domain as malicious and investigate potential credential exposure. Ongoing observation of Cloudflare‑hosted phishing infrastructure is recommended, as the rapid provisioning capabilities of the platform can enable quick re‑deployment of similar domains.