project-lezerr-liv-dsktp-us[.]pages[.]dev

PhishDestroy identifies an active phishing campaign hosted on the domain project-lezerr-liv-dsktp-us.pages.dev, currently under investigation by cybersecurity teams for deploying a generic phishing kit designed to harvest credentials and deliver malware under the guise of legitimate software. This domain resolves to IP 172.66.47.98 and is registered via Cloudflare, Inc., leveraging Google Trust Services for its SSL certificate. Critically, VirusTotal analysis shows 0 detections out of 95 engines as of the latest scan, meaning traditional antivirus tools do not yet flag it. This highlights the risk of zero-day phishing infrastructure that bypasses initial detection layers. The low detection rate suggests the campaign is either newly deployed or carefully crafted to evade signature-based defenses. Users who have accessed this domain should treat it as a high-confidence threat. If credentials or sensitive data were entered, immediately change passwords and enable multi-factor authentication on relevant accounts. Scan all connected devices with updated antivirus and anti-malware tools. Report the domain to your security team or file a complaint with organizations like Google Safe Browsing or the Anti-Phishing Working Group to help block this infrastructure globally. Exercise heightened caution with unsolicited software download links, as this campaign appears to be leveraging decoy packages to deliver malicious payloads.