lldgerr-live[.]pages[.]dev

The domain lldgerr-live.pages.dev is presently flagged as an active generic phishing site with an elevated risk rating. Infrastructure analysis shows the hostname is hosted on Cloudflare’s network, as indicated by the registrar listing and the use of Cloudflare‑owned nameservers hattie.ns.cloudflare.com and merlin.ns.cloudflare.com. DNS resolution points to the IP address 172.66.44.117, which is consistent with Cloudflare’s edge infrastructure and does not reveal a distinct backend host.

The domain appears on at least one external blocklist, specifically PhishDestroy, confirming that downstream defenses have already identified it as malicious. VirusTotal scans report that eleven out of ninety‑one security vendors have generated detections for the domain, reinforcing the blocklist observation and suggesting that multiple independent products have observed suspicious activity associated with the host. No additional telemetry such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts is available from the supplied intelligence, leaving the exact content of the site and its payload unknown.

Consequently, while the presence on a reputable phishing blocklist and multi‑vendor detections provide strong evidence of abuse, the lack of content‑level indicators limits precise attribution of the phishing campaign. Defensive practitioners should ensure that the domain is added to firewall and DNS filtering rules, monitor for any new detections from threat‑intel feeds, and consider employing sinkhole redirects for traffic to the IP address. Continuous re‑evaluation is advised, as changes to the underlying Cloudflare configuration could alter the observable surface without changing the malicious intent.