lgr-live-download[.]pages[.]dev

This domain, lgr-live-download.pages.dev, is identified as a generic phishing site designed to harvest credentials by impersonating a legitimate Cloudflare interface. The page presents itself as a login portal, likely targeting users attempting to access Cloudflare services or related infrastructure. Analysis of the domain reveals no prior malicious activity reported by endpoint security vendors, but its infrastructure and hosting pattern align with known phishing campaigns targeting cloud service providers. Evidence supporting this assessment includes a VirusTotal detection score of 0/95, indicating no antivirus engines currently flag the domain as malicious. The domain was registered on April 04, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. It appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, which, while legitimate, is often exploited by threat actors to lend credibility to phishing sites. The page title, 'Suspected phishing site | Cloudflare,' suggests that Cloudflare’s own systems may have detected and labeled the domain as suspicious. Users who visited lgr-live-download.pages.dev should immediately cease all interaction with the site and assume any credentials entered have been compromised. It is recommended to reset passwords for any accounts accessed while the domain was active, particularly those associated with cloud services or administrative portals. Enable multi-factor authentication (MFA) on all critical accounts to mitigate the risk of unauthorized access. Monitor financial and account activity for signs of misuse, and report the incident to relevant security teams or incident response platforms for further analysis. Given the domain’s current offline status, users should remain vigilant for similar phishing attempts leveraging Cloudflare’s infrastructure or branding.