us-legrliv-io-desktop[.]pages[.]dev

PhishDestroy identifies us-legrliv-io-desktop.pages.dev as an active credential-harvesting site designed to trick users into surrendering login details. The domain exploits Cloudflare Pages hosting to disguise its malicious intent behind a legitimate façade, appending a string that mimics a trusted brand or service. Victims who enter usernames, passwords, or payment data risk immediate account takeover and financial loss.

This domain was flagged by PhishDestroy after VirusTotal returned 11/95 detections, indicating it remains undetected by most antivirus engines. It was registered through Cloudflare, Inc. and resolves to IP 172.66.44.216, protected by a Google Trust Services SSL certificate to further enhance its appearance of legitimacy. The combination of zero detections, Cloudflare Pages infrastructure, and HTTPS encryption creates a deceptive environment that can bypass traditional security filters.

If you visited us-legrliv-io-desktop.pages.dev, immediately stop and change the passwords you may have entered, enable two-factor authentication on all related accounts, and scan your device with updated antivirus software. Do not re-enter any credentials on this domain. Report the site to your email provider and the platform it impersonates. Monitor financial accounts for unauthorized transactions and consider freezing credit if sensitive data was submitted. Stay vigilant for follow-up phishing attempts leveraging stolen credentials.