download-ledgar-live[.]pages[.]dev

Analysis of the domain download-ledgar-live.pages.dev indicates that it is actively being used for phishing activity as of the report date, July 29, 2026. The domain is registered through Cloudflare, Inc., and its authoritative name servers are listed as joel.ns.cloudflare.com and val.ns.cloudflare.com. DNS resolution points to the IP address 172.66.47.155, which is owned by Cloudflare's network infrastructure.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming that threat‑intelligence feeds have identified it as malicious. VirusTotal scans show that six out of ninety‑one security vendors have flagged the domain, providing additional independent corroboration of its suspicious nature. The elevated risk rating and active status further suggest that the infrastructure is currently operational.

No public page title, brand target, or detailed content analysis is available at this time, leaving the exact visual or functional characteristics of the hosted page unverified. Defenders should block all outbound and inbound traffic to download-ledgar-live.pages.dev and its associated IP address, enforce DNS sinkholing where possible, and monitor for any related C2 patterns that may emerge from the Cloudflare edge network. Continuous re‑scanning with VirusTotal and inclusion of the domain in internal blocklists are recommended to maintain protection against potential future payload deliveries.