edge-ledgrrlive-desktop[.]pages[.]dev

Analysis indicates that edge-ledgrrlive-desktop.pages.dev is currently active and has been flagged by the PhishDestroy blocklist. The domain is hosted on Cloudflare’s infrastructure, using the nameservers donald.ns.cloudflare.com and erin.ns.cloudflare.com, and resolves to the IP address 188.114.96.3. Registration was performed through Cloudflare, Inc., which is consistent with many abuse‑hosting operations that leverage the provider’s flexible DNS and CDN services. The domain appears on a single public security blocklist, confirming that at least one external threat‑intelligence feed has identified it as malicious.

A VirusTotal scan submitted the domain to 91 AV engines; none of the engines reported a detection at the time of analysis. While the lack of detections does not guarantee that the site is benign, it does suggest that the payload or page content has not yet been captured in signature‑based databases. No additional reputation services (Safe Browsing, OTX, etc.) are mentioned in the supplied intelligence, and no SSL certificate details, HTTP status codes, or page‑title information have been disclosed, leaving the surface‑level characteristics of the site unknown.

Given the limited data, the primary indicators of compromise are the blocklist entry from PhishDestroy and the association with Cloudflare‑provided DNS. Defenders should block or sinkhole the domain at the network perimeter, add the IP address 188.114.96.3 to any deny lists, and monitor DNS queries for the associated nameservers. Continuous re‑scanning with multi‑engine services and correlation with internal logs is recommended to detect any future payload delivery or credential‑harvesting activity that may emerge from this infrastructure.